Workaround for using IIS 7 url authorization with ASP.NET roles

MVolo's Blog — Thu, 21 May 2009 03:43:59 GMT

When using the IIS 7.0 Integrated pipeline, you gain access to a ton of cool scenarios where IIS and

Workaround for using IIS 7 url authorization with ASP.NET roles

NewsPeeps — Sat, 08 Aug 2009 17:21:19 GMT

Thank you for submitting this cool story - Trackback from NewsPeeps

re: Workaround for using IIS 7 url authorization with ASP.NET roles

Toby — Tue, 22 Sep 2009 19:51:17 GMT

This may seem silly, but when I use UrlAuthorization in IIS 7 integrated pipeline, my rules are interpretted correctly for .aspx pages, but not for static files. For instance, I have a directory /admin which contains a default.aspx and a jscript.js file. If I put an I need to log in to see both default.aspx and jscript.js. If I put though, or , all accounts are denied access to the jscript.js file, but default.aspx is still accessible. It makes me think there is a disconnect between the ASP.NET SqlRoleProvider and the UrlAuthorization client in IIS7. Have you come across anything like this? Unfortunately, MSDN has a pitiful amount of information on this. Is there anywhere else I should look?

re: Workaround for using IIS 7 url authorization with ASP.NET roles

Mike Volodarsky — Sun, 27 Sep 2009 02:31:51 GMT

Toby,

Be sure that Forms Authentication (if thats what you are using for authentication) is running for non-asp.net content types.

To do this, you can set <system.webServer><modules runAllManagedModesForAllRequests="true" />, or remove the forms authentication module and re-add it to clear its precondition.

You should also get a FRT trace of the failed requests to diagnose the exact issue further if the above doesnt help. See http://learn.iis.net/page.aspx/266/troubleshooting-failed-requests-using-tracing-in-iis-70/.

Thanks,

Mike

re: Workaround for using IIS 7 url authorization with ASP.NET roles

Gregory Suvalian — Tue, 08 Dec 2009 22:55:24 GMT

Can not enable roles based ACL for static content. Works only with , putting " and

re: Workaround for using IIS 7 url authorization with ASP.NET roles

Rebecca — Mon, 22 Feb 2010 16:13:29 GMT

Mike, It seems I am running into a very similar issue with a custom Role Provider. The GetRolesForUser method consistantly brings down the w3wp process when trying to instantiate a new PrinicpleContext object. Any suggestions?