I have a page (insert.aspx) and required user to login when it access it. I used the following code in web config.
<location path="group/insert.aspx">
<system.web>
<authorization>
<deny users="?"/>
</authorization>
</system.web>
</location>
For some reason, user is able to access page without login. Any thought?
Go to the complete details ...