web.cofig and authorization
-
What are the defaults for web.config? For instance, if you remove section from your web.config, is there any default value? After you remove this from web.config (and there's no other section left in this and machine.config), will ASP.NET authorize any/all unauthenticated/authenticated users? Effectively: Thanks.
-
What are the defaults for web.config? For instance, if you remove section from your web.config, is there any default value? After you remove this from web.config (and there's no other section left in this and machine.config), will ASP.NET authorize any/all unauthenticated/authenticated users? Effectively: Thanks.
The asterisk will allow all athenticated users, and the question mark will allow all anonymous users.
<authorization>
<allow users="*,?"/>
</authorization>