web.config: authorization
<?xml version="1.0" encoding="UTF-8" ?> <configuration> <system.web> <!-- The <authorization> section enables developers/administrators to configure whether a user or role has access to a particular page or resource. This is accomplished by adding "<allow>" and "<deny>" sub-tags beneath the <authorization> section - specifically detailing the users/roles allowed or denied access. Note: The "?" character indicates "anonymous" users (ie: non authenticated users). The "*" character indicates "all" users. --> <authorization> <allow users="joeuser" /> <allow roles="Admins" /> <deny users="*" /> </authorization> </system.web> </configuration>