volume_up

A critical vulnerability was discovered in React Server Components (Next.js). Our systems remain protected but we advise to update packages to newest version. Learn More

volume_up

A critical vulnerability was discovered in React Server Components (Next.js). Our systems remain protected but we advise to update packages to newest version. Learn More

Security restrictions on site directory

Iv tryed to find a way to set some security restrictions on a directory in an EPiServer site but havent found a way yet. What i basicly want to do is to disallow anonymous access to www.site.com/logged_in.

I have tryed to make a separate set of templates for secure pages and then added something like this in web.config:

 <location path="templates/pages/secure">
    <system.web>
      <authorization>
        <allow roles="Authenticated" />
        <deny users="*" />
      </authorization>
    </system.web>
  </location>

This did restrict the access but instead of sending me to the loginpage, i get an Access denied 401.2 error message.

Is this the way to go or are there a better way to do this kind of thing? Any tips would be much appreciated.

#19642
Apr 22, 2008 15:38
* You are NOT allowed to include any hyperlinks in the post because your account hasn't associated to your company. User profile should be updated.