ASP.NET Forms Authentication and a "No Authentication" subfolder

Question

Is it possible to disable all authentication in a subfolder of a web site that is Forms Authenticated? How do you accomplish this?

Sergio · Accepted Answer · 2010-03-11 14:21:39Z

7

Yes, place a web.config file on the subfolder with this content:

<configuration>
    <system.web>
      <authorization>
        <allow users="*"/>
      </authorization>
    </system.web>
</configuration>

answered Mar 11, 2010 at 14:10

Sergio

8,31510 gold badges50 silver badges77 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

Actually I noticed then I couldn't get to some connection strings in the web.config one level below this new one. Is that supposed to happen?

It could have been cause by the <connectionStrings/> tag in the original post

Although the solution might seem obvious and simple, this helped me figure out a hair-puller. Thanks!

Is this different than adding a <location> tag with the same content inside the root web.config?

Prashant Lakhlani · Accepted Answer · 2010-03-11 14:12:25Z

4

yes you can, you can use location tag in the web.config to configure folder level security.

answered Mar 11, 2010 at 14:12

Prashant Lakhlani

5,8065 gold badges27 silver badges39 bronze badges

I would probably use this method if I had many locations to specify differently and I wanted to manage them from a central file. good answer. +1