ASP.NET Web Forms and MVC Bypass Authorization for Single Form or Single Controller using web.config

Jika penanganan authorization menggunakan web.config, authorization dapat di by pass untuk form tertentu / controller tertentu.

“Api/File” adalah url untuk memanggil controller (MVC / Web API). “service/FileService.aspx” adalah struktur folder/file ke form.

[code language=”xml”]
<configuration>
<location path="Api/File">
<system.web>
<authorization>
<allow users="?"></allow>
</authorization>
</system.web>
</location>

<location path="service/FileService.aspx">
<system.web>
<authorization>
<allow users="?"></allow>
</authorization>
</system.web>
</location>

<system.web>
<authentication mode="Windows" />
<authorization>
<allow users="YUDHA\Yudha Satria,YUDHA-PC\Yudha Satria" />
<deny users="?" />
</authorization>
</system.web>
</configuration>
[/code]