Hello EveryBody,

i'm working on the security part of a webiste. This site contains 11 roles, and the access rules are well defined. I've created them and this works as i expected it to work BUT

(won't have been here if there was no "but")

can give me a tip on how to redirect the users that have been denied an access to some pages in another page than the login page.

Everytime an access is refused, i'm sent back to my login form but would prefer to be sent to the index of the site.

THANKS A LOT 

securityTrimmingEnabled="true"

in your web.config file so you won't even have that problem as the users who don't have access to that page won't even see that it exists as it wont be listed on the menu.

<providers>

siteMapFile="Web.sitemap" securityTrimmingEnabled="true"/>

</siteMap>

If you want to change the url for which non-authenticated users are redirected, then you should change the loginUrl property of the forms element within your Web.config file.

http://msdn2.microsoft.com/en-us/library/1d3t3c61.aspx

you could do that as well but when ppl try to access a page that they normally have access to won't be able to access it and instead of being re-directed to your login form, they'll just be redirected to your home page.

 But whatever works for you.

 Thanx for your help.

1st: I use a sitemap, bit I have got a css menu and have to keep it where it is, so i've given up the solution of the asp.net controls.

2nd : I didn't remember the loginUrl

3rd: I would like to use it but always get an error

Line 20 :   <roleManager enabled="true" />
Line 21 :     <authentication mode="Forms">
Line 22 :       <Forms loginUrl="~/Accueil.aspx">
Line 23 :       </Forms>
Line 24 :     </authentication>

 what shall i modify ?

THX A LOT FOR YOUR HELP
 

why not just put a login form (a small one) on your main page? That's what most sites do.

The elements and attributes within your Web.config file are case-sensitive. With this, change your 'Forms' element to 'forms'.

 I can really not do it since I am not the project manager, since I just can type lines of code, just giving my opinion on the gestion rules and way to proceed, but not on the organisation of the site and its graphic aspects... ;)

 Actually, i've got a specific login page because i need to explain many things to my users before giving them the possibility to log in or to create an account. Moreover, this is some kind of transition page from an internet website to an intranet site.

Thx
 

 @ecbruck: thx for your help, i modifed my mistake but this still do not work. In fact, it has stopped redirecting me to the login page, but it now sends me to the parent directory, listing all the pages and directories of the site.

 The page i want to be redirected to is in the root directory, it is called Accueil.aspx and i believe i don't need any "~" or "/" .
 

I'm not sure why that didn't work. Your url looks fine. You're close.

kalahaine:

This site contains 11 roles, and the access rules are well defined.

....... 

can give me a tip on how to redirect the users that have been denied an access to some pages in another page than the login page.

Hi

User will be redirect to login page so that they can re-input an account and after a successful login, it uses ReturnURL to navigate from the login page.

If you predict they don't want to re-input an account but prefer to be sent to the index of the site, I think you can use

Response.Redirect("index.html")

in Page_Load event of login page.