I have only a few users with admin privileges to edit. That's why I decided to include the authorization in the web config file. In the .
For administration purpose I created an admin folder and I added a second web config file in it. My other files that can be accessed of all the user are not in separate folder.
<?xml version="1.0"?>
<configuration>
<system.web>
<authentication mode="Forms">
<forms loginUrl="Login.aspx" timeout="30"
defaultUrl="Welcome.aspx" protection="All">
<credentials passwordFormat="Clear">
<user name="Test" password="Pass"/>
</credentials>
</forms>
</authentication>
<authorization>
<deny users="?" />
</authorization>
</sys ...
Go to the complete details ...