authorization different paths and roles

From: Matias Woloski (woloski_at_NOSPAMsion.com)
Date: 08/28/04


Date: Sat, 28 Aug 2004 18:37:44 -0300

I have this authorization config in my web.config

<location path="manager">
    <system.web>
        <authorization>
            <deny users="?" />
            <allow roles="admins" />
         </authorization>
  </system.web>
</location>
<location path="resourcemgr">
    <system.web>
        <authorization>
            <deny users="?" />
            <allow roles="resourceEditors" />
       </authorization>
  </system.web>
</location>

I need to give access to the "manager" dir for the "admins" role and access
to "resourcemgr" dir for the "resourceEditors" role

With this config is allowing me to get in the "manager" dir using the
"resourceEditors", and that couldn't be.

Am I missing something?

thanks
MAtias