Authorisation Issue

[richard]

Hi,

I have an asp.net web site. I want 1 page to be accessed by a group ( which
I have set up on the web server). The remaining web pages can be accessed by
anyone.

In the web.config file I have used these settings:
<authorization>

<allow users="*" />

</authorization>



<location path="Support.aspx">

<system.web>

<authorization>

<allow roles="Server/MyGroup" /><deny users="*" />

</authorization>

</system.web>

</location>


With these settings, access for the users in the group is extremely slow for
that one page - whereas access to the other pages in the directory is
normal.

If I remove the location section from the web.config file their access to
that web page reverts to the speed of the other web pages. How can I
resolve this?

Cheers,

Richard.

 

[Keith]

Seems like you should be using <deny users="?" /> instead
of <deny users="*" />, but keep in mind that permissions
checking against a group will require it to see if the
current user the access is running under is in a
particular group. This can be slow.