try this:

<location path="humanres/file1.aspx">
    <system.web>
      <authorization>
        <deny users="?"/>

     
<allow users="*"/>
      </authorization>
    </system.web>
  </location>