Authorization

[Ladyhawk]

If I have the following authorization set, in which order are they applied or doesn't it matter?

<authorization>
<deny users=&quot;tania, megan&quot;>
<deny users=&quot;?&quot;>
<allow users=&quot;*&quot;>
</authorization>

The doco I have says that the <allow users=&quot;*&quot;> is redundant, but I don't see how. ? is anonymous.

Ladyhawk.
** ASP/VB/Java Programmer **

 

[net123]

Who are you actually wanting to deny/allow? Something doesn't make sense: You are first denying ALL ANONYMOUS USERS and then you are allowing ALL USERS (both anonymous and authenticated).

This is poor design -- and without trying it out, I am guessing ALL AUTHENTICATED USERS are only allowed.

Hope this helps a bit.