Hi,

My web site does not need any authentication. Users can enter without entering a username and password. But now i want to add a collection of pages that ony

users that log in can access. I placed all the new pages in a subfolder called manager and added the next code in the web config:

<forms loginUrl="/manager/Acceso.aspx"></forms>

<authorization>

<deny users="?"/>

When execute the application I get the next error :

"It is incorrect to utilize a registered section as allowDefinition =' MachineToApplication' but there of the level of application. ...."

I tried to place a new config file inside the subfolder with the authenctication tag but i get the same problem.

What am doing wrong?

It that the best way to implement authentication for part of a web side??

Thank you in advance

Use main web.config to set up form authentication (login form etc). In your sub-folder have web.config in a following format

<?xml version="1.0" encoding="utf-8"?>
<configuration xmlns="http://schemas.microsoft.com/.NetConfiguration/v2.0">
   <system.web>
      <authorization>
         <allow roles="Admin,Editor" />
         <deny users="*" />
      </authorization>
   </system.web>

   <location path="Default.aspx">
      <system.web>
         <authorization>
            <allow roles="Admin,Editor" />
            <deny users="*" />
         </authorization>
      </system.web>
   </location>
</configuration>