Hi All

 I am using MVC with Form authentication and would like to limit the user to access some of the resources before they login.

 Therefore, I tried.

 <location path="Home/Home">
    <system.web>
      <authorization>
        <allow users="*" />
      </authorization>
    </system.web>
  </location>

  <location path="Home/Login">
    <system.web>
      <authorization>
        <allow users="*" />
      </authorization>
    </system.web>
  </location> 

But it won't allow me to call the Home/Login function under HomeController.

 However, if I tried this.

 <location path="Home">
    <system.web>
      <authorization>
        <allow users="*" />
      </authorization>
    </system.web>
  </location>

 It works fine but I just worry it may have some security issue since I may have more functions under the controller and user may access it without permission.

Could it be solved?

Regards

Alex

Have a look at this project on Codeplex:

http://www.codeplex.com/MvcMembership