允许未经身份验证的用户访问特定页面使用ASP.Net窗体身份验证

Question

我正在使用ASP.Net窗体身份验证。我的Web.config看起来像这样。

<authentication mode="Forms"> 
     <forms loginUrl="login.aspx"/> 
    </authentication> 
    <authorization> 
     <deny users="?" /> 
    </authorization> 

因此，目前每个aspx页面都需要验证。

我想允许访问甚至未经身份验证的用户访问名为special.aspx的特定页面。 我该怎么做？

Answer 1

就以MS Support

<configuration> 
    <system.web> 
     <authentication mode="Forms" > 
      <forms loginUrl="login.aspx" name=".ASPNETAUTH" protection="None" path="/" timeout="20" > 
      </forms> 
     </authentication> 
<!-- This section denies access to all files in this 
application except for those that you have not explicitly 
specified by using another setting. --> 
     <authorization> 
      <deny users="?" /> 
     </authorization> 
    </system.web> 
<!-- This section gives the unauthenticated 
user access to the ThePageThatUnauthenticatedUsersCanVisit.aspx 
page only. It is located in the same folder 
as this configuration file. --> 
     <location path="ThePageThatUnauthenticatedUsersCanVisit.aspx"> 
     <system.web> 
     <authorization> 
      <allow users ="*" /> 
     </authorization> 
     </system.web> 
     </location> 
<!-- This section gives the unauthenticated 
user access to all of the files that are stored 
in the TheDirectoryThatUnauthenticatedUsersCanVisit folder. --> 
     <location path="TheDirectoryThatUnauthenticatedUsersCanVisit"> 
     <system.web> 
     <authorization> 
      <allow users ="*" /> 
     </authorization> 
     </system.web> 
     </location> 
</configuration> 

Answer 2

看看例子放入你的web.config以下：

<location path="special.aspx"> 
    <system.web> 
     <authorization> 
     <allow users="*"/> 
     </authorization> 
    </system.web> 
    </location> 

Answer 3

<location path="register.aspx"> //path here is path to your register.aspx page 
<system.web> 

<authorization> 
<allow users="*"/> // this will allow access to everyone to register.aspx 
</authorization> 

</system.web> 
</location> 

有关更多详细信息请按照下面的链接

http://weblogs.asp.net/gurusarkar/setting-authorization-rules-for-a-particular-page-or-folder-in-web-config

Answer 4

允许所有人访问特定页面

有时你想允许一些页面的公共访问，并希望限制只能访问到登录/身份验证的用户.i.e网站的其余部分。不允许匿名访问。假设您的special.aspx位于您网站的根文件夹中。在你的网站根文件夹的web.config中，你需要进行以下设置。

<configuration> 
    <system.web> 

    <authentication mode="Forms"/> 

     <authorization> <deny users="?"/> //this will restrict anonymous user access 
     </authorization> 

    </system.web> 
    <location path="special.aspx"> //path here is path to your special.aspx page 
    <system.web> 
    <authorization> 
    <allow users="*"/> // this will allow access to everyone to special.aspx 

</authorization> 
</system.web> 
</location> 
</configuration>