DotNet Programming

Authorization is to determine whether an identity should be granted the requested type of access to a given resource.

users: Assign a list of users to be granted or denied access

Roles: Assign a list of roles to be granted or denied access

<authorization>
<allow users="Don , Jim" roles="Admins" /> //Allow only two user Don,Jim

<deny users="*" /> //Restrict all other user

</authorization>

//Allow All the user to access

<authorization>
<allow users="*" />
</authorization>

* Refers to all identities
? Refers to the anonymous identity