Click here to Skip to main content
15,891,607 members
Please Sign up or sign in to vote.
0.00/5 (No votes)
<authorization>
<deny users="*" />
</authorization>

I understand the above block of code will deny all users ..

My Question is : What will this do ?

<authorization>
<deny users="?" />
</authorization>

Will it check if the logged in user is authorized ? If yes HOW and WHERE should i write a code..

I have seen people writing

<authorization>
<allow users="Admin" />
</authorization>
But i cant manually write this if i have multiple users whom i want to give access how would i do that ?

My understanding says i can write a Function which hits a database and check if UserID =1 has access to PAGEID=1 then let him continue further else land him on NOACCESS.aspx.

But then what does the above blocks in web config do ?

What I have tried:

i have written function to fetch user access from database and handling on page load
Posted
Updated 18-Apr-16 21:01pm
v3
Comments
What is the Authentication Mode?
Abrar Kazi 19-Apr-16 7:41am    
FORMS
So you must be doing a authorization somewhere while user logs in?
F-ES Sitecore 19-Apr-16 4:32am    
Those settings are for the various authentication frameworks like Membership or Identity. If you are making your own system you won't be able to use them. If you want to use those frameworks but by using your own database tables etc then you will need to write a custom provider for Membership etc.
Abrar Kazi 19-Apr-16 7:42am    
What could be Membership and Identity in this case ?

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)



CodeProject, 20 Bay Street, 11th Floor Toronto, Ontario, Canada M5J 2N8 +1 (416) 849-8900