Re: newbie: allow deny vs deny allow

Tech-Archive recommends: Fix windows errors by optimizing your registry

There should be nothing different because of the ordering. In each case, you
are saying allow all, but deny by ensuring a person has an account.

--
Gregory A. Beamer
MVP; MCP: +I, SE, SD, DBA

*************************************************
Think outside of the box!
*************************************************
"Jeff" <it_consultant1@xxxxxxxxxxxxxxxxxx> wrote in message
news:ePCvcE32GHA.988@xxxxxxxxxxxxxxxxxxxxxxx
asp.net 2.0 security:

Below are 2 authorization blocks. I wonder what is the difference between
them from a security point of view?

I guess this can be a standard question on a asp.net 2.0 certification
exam, so i'm very interested to know the difference between these
settings.

<authorization>
<deny users="?"/>
<allow users="*"/>
</authorization>

<authorization>
<allow users="*"/>
<deny users="?"/>
</authorization>






.

Relevant Pages

  • Re: How does DHCP check if its authorized?
    ... There are dhcp servers in the 2 ... The DRD1 domain does not trust any users from the root or DRD2. ... The authoriZation/unauthoriZation and check for authoriZation process is ... Enterprise Administrator account, forest root domain Administrator, System, ...
    (microsoft.public.windows.server.networking)
  • Re: Intranet connect to SQLServer Under users account.
    ... authorization to this... ... > I have set up the Web site so that it uses Windows Integrated security, ... > On a test webpage I can output the user account being used: ... > SQLServer using their account. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Getting Paid from Abroad as a PHP Developer
    ... In practice it is possible to take any amount of money from a bank ... account just using the account number. ... credit checks) can have their company account set up to receive debits. ... in theory this requires your authorization. ...
    (comp.lang.php)
  • Re: Debit card article in Readers Digest
    ... | actually *processes* an ACH transaction for your account ... | can get in some serious trouble (ie. lose their authorization ... entity initiating the ACH debit dip had two choices. ... holder to contact the initiator and prevent the debit. ...
    (misc.consumers)
  • Re: Todays Laugh, Courtesy of the Telephone Company
    ... we seldom worried about authorization to make ... Some customers requested we note the account to identify an authorized ... usual period and being barraged by the usual voicemail options, ... We've been taken over by idiots. ...
    (rec.boats)