Hi all,

My website contain 3 parts :
- 1 front office which anonymous users could see all the pages
- 1 back office which only admin could see the pages
- 1 part of teh website which only authentificated users could go.

In order to create this security, I want to use :
in my web.config

<authentication mode="Forms">


  <forms name="AdminLogin" path="~/Admin" loginUrl="~/Admin/AdminLogin.aspx" protection="All" timeout="30">


    <credentials passwordFormat="Clear">


      <user name="dalche" password="admin"></user>				


    </credentials>


  </forms>


</authentication>

but in this case, all my pages require a authentification.

Is it possible to say :
in public directory, no authentification,
in private directory : authentification by data contains in sql server
in Admin directory : authentification by Simple forms-based

Thanks for your esponses...

Séb

What you need is role-based security in ASP.NET

Have a look at this article:

http://www.4guysfromrolla.com/webtech/121901-1.shtml