Restrict access to resources like .doc, .ppt etc in .net forms authentication application

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Gaurav (gaurav_kumar_at_infosys.com)
Date: 04/02/04

Next message: LOSCAdmin: "Unable to access web project on server with SSL and Client Certificates Required turned on"
Previous message: Sebastien Lambla: "Re: How can I run asp.net in other computers...."
Next in thread: Steve C. Orr [MVP, MCSD]: "Re: Restrict access to resources like .doc, .ppt etc in .net forms authentication application"
Reply: Steve C. Orr [MVP, MCSD]: "Re: Restrict access to resources like .doc, .ppt etc in .net forms authentication application"
Reply: GK: "Re: Restrict access to resources like .doc, .ppt etc in .net forms authentication application"
Messages sorted by: [ date ] [ thread ]

Date: 2 Apr 2004 07:11:07 -0800

Hi,

We are developing a .NET app which has forms authentication. When the
user types in the direct URL of an aspx page on the browser, he will
be thrown to the login page. But if the URL points to a .txt or .doc
file, the document is displayed even though the user is not
authenticated.

How do we stop this such that the user has to login to the application
and then view the documents.

Thanks and Regards,
Gaurav

Next message: LOSCAdmin: "Unable to access web project on server with SSL and Client Certificates Required turned on"
Previous message: Sebastien Lambla: "Re: How can I run asp.net in other computers...."
Next in thread: Steve C. Orr [MVP, MCSD]: "Re: Restrict access to resources like .doc, .ppt etc in .net forms authentication application"
Reply: Steve C. Orr [MVP, MCSD]: "Re: Restrict access to resources like .doc, .ppt etc in .net forms authentication application"
Reply: GK: "Re: Restrict access to resources like .doc, .ppt etc in .net forms authentication application"
Messages sorted by: [ date ] [ thread ]

Relevant Pages

Re: Force Relogin. IIS6, ASP.NET app, IE6+ browser
... now it appears you are suggesting I either write a custom authentication ... not prompt with a login dialog. ... The problem you face is that a browser will automatically attempt ... If you can control the browsers to not auto-login to your website, ...
(microsoft.public.inetserver.iis.security)
Re: Force Relogin. IIS6, ASP.NET app, IE6+ browser
... now it appears you are suggesting I either write a custom authentication ... cookies/tokens involved; IIS has no idea what a session is; IIS does ... not prompt with a login dialog. ... The problem you face is that a browser will automatically attempt ...
(microsoft.public.inetserver.iis.security)
Re: HttpWebRequest and posting login data
... > How can I post data to an ASP.NET login page and pass authentication? ... You are attempting to substitute code for a browser. ... and a Location header pointing to the login page. ...
(microsoft.public.dotnet.framework.aspnet.security)
Re: Logging into website - remove log in box
... the issue is NOT about removing the login box. ... then enable anonymous authentication and disable any other ... authentication in IIS. ... browser auto-login so no login box shows up. ...
(microsoft.public.inetserver.iis.security)
Re: Logged in twice at the same time?
... It depends on what kind of login you are talking about. ... If you are dealing with a .htaccess basic login, and the authentication ... a browser can have lots of different ... >Now the first page shows my original username. ...
(comp.lang.php)