[Mono-bugs] [Bug 568441] New: Web.config <location>-><authorization> tag doesn't work

[bugzilla_noreply at novell.com]

http://bugzilla.novell.com/show_bug.cgi?id=568441

http://bugzilla.novell.com/show_bug.cgi?id=568441#c0


           Summary: Web.config <location>-><authorization> tag doesn't
                    work
    Classification: Mono
           Product: Mono: Class Libraries
           Version: 2.6.x
          Platform: 32bit
        OS/Version: Linux
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Sys.Web
        AssignedTo: mhabersack at novell.com
        ReportedBy: gonzalezrobert at cantv.net
         QAContact: mono-bugs at lists.ximian.com
          Found By: DeveloperNet
           Blocker: ---


Description of Problem:
Setting security for subfolders or pages in web.config using the <location> tag
does not work.  The main site is set to deny for anonymous users (users='?'),
where certain files/folders are set to allow access to all, which does not
work.

Steps to reproduce the problem:
1. Put this code in your Web.Config
  <location path="Default.aspx">
    <system.web>
      <authorization>
        <allow users="*"/>
      </authorization>
    </system.web>
  </location>

2. Navigate to /Default.aspx

Actual Results: 
Site automatically redirects to login.aspx

Expected Results:
Default.aspx must to be visible without logging in.

How often does this happen? 
Always

Additional Information:
OS: CentOS 5.3
Work Correctly on Mono 2.4.3

-- 
Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.