Saturday, March 24, 2012

newbie: security & themes!

Hey

asp.net 2.0

I have a webpage which get it's layout data from a theme. Using the theme
works without problem until I added these settings to the web.config file:
<authorization>
<deny users="?"/>
</authorization>

With this new settings in web.config the theme isn't applied to the page!

I've only tested this for unauthenticated users

Top-most script in Default.aspx file:
<%@dotnet.itags.org. Page Language="C#" MasterPageFile="~/MainMaster.master"
AutoEventWireup="true" CodeFile="Default.aspx.cs" Inherits="_Default"
Title="Untitled Page" Theme="Standard" %>

What should I do make the theme work with the newly applied web.config
settings?

JeffHi,
This is a strange problem, does your theme use Css or reference other images,
if so you need to allow access to these Css and image files for everyone,
for example i have two folder Css and Images where i store my css and other
images used in the site graphics i have to add these lines to the web.config
to allow access to these folders
<location path="images">
<system.web>
<authorization>
<allow users="*"/>
</authorization>
</system.web>
</location>
<location path="Css">
<system.web>
<authorization>
<allow users="*"/>
</authorization>
</system.web>
</location>

May be this will resolve your problem.

Regards,
Mohamed Mosalem

"Jeff" wrote:

Quote:

Originally Posted by

Hey
>
asp.net 2.0
>
I have a webpage which get it's layout data from a theme. Using the theme
works without problem until I added these settings to the web.config file:
<authorization>
<deny users="?"/>
</authorization>
>
With this new settings in web.config the theme isn't applied to the page!
>
I've only tested this for unauthenticated users
>
Top-most script in Default.aspx file:
<%@. Page Language="C#" MasterPageFile="~/MainMaster.master"
AutoEventWireup="true" CodeFile="Default.aspx.cs" Inherits="_Default"
Title="Untitled Page" Theme="Standard" %>
>
What should I do make the theme work with the newly applied web.config
settings?
>
Jeff
>
>
>
>


Hello Mohamed, thank you for replying to this post!

Yes, this theme is using css, but the .css file is in the theme folder:
App_Themes\Standard\Default.css

This css file is referencing a image file which is placed in the same folder
as the Default.css file

Should I use this script then:
</location>
<location path="App_Themes\Standard\">
<system.web>

Any suggestions? maybe I instead should use a .skin file?

Jeff

"Mohamed Mosalem" <MohamedMosalem@.discussions.microsoft.comwrote in
message news:94DF0D8F-86D7-4704-8CC7-69150241CDD5@.microsoft.com...

Quote:

Originally Posted by

Hi,
This is a strange problem, does your theme use Css or reference other
images,
if so you need to allow access to these Css and image files for everyone,
for example i have two folder Css and Images where i store my css and
other
images used in the site graphics i have to add these lines to the
web.config
to allow access to these folders
<location path="images">
<system.web>
<authorization>
<allow users="*"/>
</authorization>
</system.web>
</location>
<location path="Css">
<system.web>
<authorization>
<allow users="*"/>
</authorization>
</system.web>
</location>
>
May be this will resolve your problem.
>
Regards,
Mohamed Mosalem
>
"Jeff" wrote:
>

Quote:

Originally Posted by

>Hey
>>
>asp.net 2.0
>>
>I have a webpage which get it's layout data from a theme. Using the theme
>works without problem until I added these settings to the web.config
>file:
><authorization>
><deny users="?"/>
></authorization>
>>
>With this new settings in web.config the theme isn't applied to the page!
>>
>I've only tested this for unauthenticated users
>>
>Top-most script in Default.aspx file:
><%@. Page Language="C#" MasterPageFile="~/MainMaster.master"
>AutoEventWireup="true" CodeFile="Default.aspx.cs" Inherits="_Default"
>Title="Untitled Page" Theme="Standard" %>
>>
>What should I do make the theme work with the newly applied web.config
>settings?
>>
>Jeff
>>
>>
>>
>>


Hi Jeff,
Of course you need the skin file, this file determines the styles and
properties that will be applied to the server controls
"Jeff" wrote:

Quote:

Originally Posted by

Hello Mohamed, thank you for replying to this post!
>
Yes, this theme is using css, but the .css file is in the theme folder:
App_Themes\Standard\Default.css
>
This css file is referencing a image file which is placed in the same folder
as the Default.css file
>
Should I use this script then:
</location>
<location path="App_Themes\Standard\">
<system.web>
>
Any suggestions? maybe I instead should use a .skin file?
>
Jeff
>
>
"Mohamed Mosalem" <MohamedMosalem@.discussions.microsoft.comwrote in
message news:94DF0D8F-86D7-4704-8CC7-69150241CDD5@.microsoft.com...

Quote:

Originally Posted by

Hi,
This is a strange problem, does your theme use Css or reference other
images,
if so you need to allow access to these Css and image files for everyone,
for example i have two folder Css and Images where i store my css and
other
images used in the site graphics i have to add these lines to the
web.config
to allow access to these folders
<location path="images">
<system.web>
<authorization>
<allow users="*"/>
</authorization>
</system.web>
</location>
<location path="Css">
<system.web>
<authorization>
<allow users="*"/>
</authorization>
</system.web>
</location>

May be this will resolve your problem.

Regards,
Mohamed Mosalem

"Jeff" wrote:

Quote:

Originally Posted by

Hey
>
asp.net 2.0
>
I have a webpage which get it's layout data from a theme. Using the theme
works without problem until I added these settings to the web.config
file:
<authorization>
<deny users="?"/>
</authorization>
>
With this new settings in web.config the theme isn't applied to the page!
>
I've only tested this for unauthenticated users
>
Top-most script in Default.aspx file:
<%@. Page Language="C#" MasterPageFile="~/MainMaster.master"
AutoEventWireup="true" CodeFile="Default.aspx.cs" Inherits="_Default"
Title="Untitled Page" Theme="Standard" %>
>
What should I do make the theme work with the newly applied web.config
settings?
>
Jeff
>
>
>
>


>
>
>

0 comments:

Post a Comment