How to restrict folder access in asp.net

This will prevent all users from direct access to Uploads folder and its content.

Very usefull, this works perfect if your site don‘t has roles or authentication

回答2

You can do like @klausbyskov mentions, to add <authorization />‘s to the root web.config, like:

<location path="Admin">
    <system.web>
        <authorization>
            <allow roles="Administrator"/>
            <deny users="*"/>
        </authorization>
    </system.web>
</location>

or you can add a web.config to the folder where you want to allow/deny access with the following content:

<?xml version="1.0"?>
<configuration>
    <system.web>
        <authorization>
            <allow roles="Administrator"/>
            <deny users="*" />              
        </authorization>
    </system.web>
</configuration>

Of course replace the <allow /> and <deny /> with you own rules

回答3

You should add a web.config file to said folder and put an <authorization> tag in the file, as described here.

How to restrict folder access in asp.net

标签：gen   wan   mini   err   用户   tac   following   answer   conf