limiting access to HAP

[mattgrimley]

Hi @nickbro

 

What is the best way to limit users access to the portal? I can't see anything in the HAP config which would apply and i can't see how to use IIS Authorization rules (as this requires the user to already be authenticated else it blocks the login page)..

 

Can't help but think i'm missing something.. or would this be a new feature request?

 

Cheers in advance,

Matt

[nickbro]

You can use IIS, there is an overrides in the web.config file for the login page. You can also edit the web.config file directly

 

 

You can find out what to do with that from msdn/asp.net

[mattgrimley]

Is there a chicken and egg situation.. if i add a deny, won't that effect the forms page? (i.e. IIS can't know who the user is until after authentication - but any deny rule would require identifying the user.)

 

So, i could deny subfolders easily, but anything on the root would be a problem? :s

[nickbro]

That's odd, have you tried editing the web.config file directly?

 

You can also use allow rules instead of deny

 

so it comes