Custom "Access Denied" Message

From: Jay Nesbitt (jay_at_iconologic.RemoveThis.com)
Date: 11/17/03 

Date: Mon, 17 Nov 2003 14:45:27 -0500

I'm using forms authentication along with role based authorization in my web
app. The problem I'm having is that when a user that has already been
authenticated tries to access an url that they are not authorized for, they
get kicked back to the login page. This makes no since to me since the user
has already been authenticated. Why does asp.net do this? Is there a
workaround for this that will allow me to present unauthorized users with a
custom "Access Denied" page? I know I could do this programatically in each
page but I would prefer a solution that would allow me to do it
declaritively in the web.config file. Any ideas?

Thanks

Relevant Pages

  • asp.net vulnerability
    ... From: Windows NTBugtraq Mailing List ... More details on ASP.NET vulnerability ... There has been some confusion with the ASP.NET forms authentication issue ... authorization issue, not an authentication issue. ...
    (microsoft.public.sharepoint.portalserver)
  • Re: application pool custom identity
    ... Kerberos becomes a possibility when the web server is in a Domain, ... The problem happens when the browser/server selects Kerberos authentication, ... LocalSystem credentials will work for Kerberos; custom AppPool Identity ... Authorization. ...
    (microsoft.public.inetserver.iis)
  • Re: Web.config
    ... "On" Always display custom messages. ... "Off" Always display detailed ASP.NET error information. ... This section sets the authentication policies of the application. ... This section sets the authorization policies of the application. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Kerberos OpenLDAP Frontend
    ... Jonathan Javier Cordoba Gonzalez wrote: ... but then you are mixing the authentication with the authorization. ... A KDC with passwords and LDAP ...
    (comp.protocols.kerberos)
  • RE: Custom login will not work
    ... For forms authentication, you do can use the global.asax or a custom ... And for the authorization on page url, ... Microsoft MSDN Online Support Lead ...
    (microsoft.public.dotnet.framework.aspnet)