C#

We have an asp.net web application running in both .net 1.1 and 4.0. This application has a web.config file in the root folder where the authorization module is defined as

<authorization>
   <allow users="*"/>
</authorization>

It has another web application in the sub directory where the web.config authorization module is as below

<authorization>
   <allow roles="some valid role"/>
   <deny users="*"/>
</authorization>

These  configuration settings work fine in .net 1.1 but after migration to .net 4.0, the application is causing problems in providing appropriate access.

Is there any difference in reading the authorization module tags(<allow>,<deny>) of web.config of an application in .net 4.0 and 1.1 ?

try
{
    string c = System.Environment.MachineName;
    string Domain = System.Net.Dns.GetHostName();
    ManagementObjectSearcher SerialNo = new 
    ManagementObjectSearcher("root\\CIMV2", "SELECT * FROM 
    Win32_SystemEnclosure");
    foreach (ManagementObject querySN in SerialNo.Get())
        {
        string SN = (querySN["SerialNumber"].ToString());
        string SysIdent = c + SN + "@" + Domain;
        
        SqlConnection conn1 = new SqlConnection("User id = a; 
        password = b; server=c; database=d;connection timeout=30");
        SqlCommand selectname = new SqlCommand("SELECT FullName
        FROM dbo.tablename", IdentSys);
        IdentSys.Open();
        SqlDataReader GetIdnt = selectname.ExecuteReader();
        while (GetIdnt.Read())
            {
            string Names = Convert.ToString(GetIdnt["FullName"]);
                {
                if (Names != SysIdent)
                    {
                    SqlConnection conn2 = new SqlConnection("User id = a;
                    password = b; server=c; database=d;connection timeout=30");
                    SqlCommand newname = new SqlCommand("INSERT
                    INTO dbo.SysIdent(FullName) VALUES(@FullName)", InsertSys);
             newname.Parameters.AddWithValue("@FullName",SysIdent);
                    InsertSys.Open();
                    newname.ExecuteNonQuery();
                    InsertSys.Close();
                    }
                }
            }
    GetIdnt.Close();
    }
}
catch (Exception f)
{
Console.WriteLine(f.ToString());
}