This is a migrated thread and some comments may be shown as answers.

[Solved] Securing Telerik enable web site - missing assets

1 Answer 87 Views
General Discussions
This is a migrated thread and some comments may be shown as answers.
This question is locked. New answers and comments are not allowed.
dani
Top achievements
Rank 1
dani asked on 28 Mar 2011, 11:28 AM
Hi,
When I'm using Authorization to limit access to the site to authenticated users,
I have a problem, in the logon screen.

http://localhost:6105/asset.axd?id=<some giberish>    is not found.

as I'm using:
 <authorization>
      <deny users="?" />
    </authorization>
and
<location path="Content">
    <system.web>
      <authorization>
        <allow users="*" />
      </authorization>
    </system.web>
  </location>

What am I missing ? if I remove the deny (or use allow instead) everything works ok.

(my only problem actually is that my app is RTL and the logon screen becomes ltr b/c missing assets)

Thanks,
Dani


1 Answer, 1 is accepted

Sort by
0
Accepted
Rosen
Telerik team
answered on 28 Mar 2011, 12:35 PM
Hi dani,

In order web assets to work in this scenario, you should explicitly make them available for anonymous users.

<configuration>
...
<location path="asset.axd">
   <system.web>
     <authorization>
       <allow users="*"/>
     </authorization>
   </system.web>
 </location>
...
</configuration>
 
Regards,
Rosen
the Telerik team
Tags
General Discussions
Asked by
dani
Top achievements
Rank 1
Answers by
Rosen
Telerik team
Share this question
or