Access Restrictions

[TotalGeek]

I'm probably missing something obvious but having followed previous posts on the subject and I am confused...

 

I have added this code to my web.config file...

 

 

However when accessing with a user that is not in the [sec_HapUsers] AD Group it comes up unauthorized but I am still able to browse to My Files from the link that is above the unauthorized text in the drop down menu.

 

I am using HAP 8.7... Any ideas?

Edited February 8, 2013 by TotalGeek

[nickbro]

Is that an AD Group or an AD Org Unit?

[TotalGeek]

Hi Nick

 

It is an AD Security Group...

[nickbro]

Should be

[TotalGeek]

The problem though is that although I get the unauthorized page I am still able to browse My Files of that user that should be unauthorized.

 

Is there a way to stop that from happening?

[nickbro]

MyFiles is an unrestricted section, it'll restrict on the mapping definitions.

 

To stop a specific user group from seeing MyFiles, open ~/myfiles/web.config and edit it like ~/bookingsystem/web.config

[TotalGeek]

Thanks Nick... There wasn't a web.config in the MyFiles directory otherwise I might have guessed to do that myself...

 

Many thanks for your help and for such a great project.... I am going to try to badger my bursar to give you a donation...

[nickbro]

If you want to stop any tom dick and harry from getting in, you can try

 
...
   
     
   
   
   
 

 

Change it to

 

 
...
   
     
     
     
   
   
   
 

 

See if that works

[TotalGeek]

Yep Tom, Dick and Harry can't get in now

[GSmith]

hi, is this still a valid approach for v10+ ?

 

giles