Re: Forms-Based Authentiction and NON ASP.NET Assets

From: WJ (JohnWebbs_at_HotMail.Com)
Date: 02/21/05 

Date: Mon, 21 Feb 2005 15:51:39 -0500

If these objects/files are sensitive, the safest way to store them is
"database" in the form of "image". I do this for documents and images. They
work OK.

John

"Alex Maghen" <AlexMaghen@discussions.microsoft.com> wrote in message
news:CEF1ED71-DA8E-4A9F-B70F-3FA4E537FBBE@microsoft.com...
>I have a feeling you're gonna say no but, is there any way, with ASP.NET
> Forms-Based Authentication, to protect access to NON ASP.NET objects? For
> example, if I have a directory that has .ASPX files AND, say, JPEG files
> (.jpg), it would appear that if the user has the URL to one of the JPEGs,
> he
> can still come back any time and download it without being sent to the
> Login
> page. I assume this is because, for a JPEG file, ASP.NET is not involved
> at
> all in the whole IIS loop.
>
> Right?
>
> Alex