security!!!

  • Thread starter Thread starter Amir
  • Start date Start date
A

Amir

Hi every one i had a question

i am developing a asp.net application
where in this application people who sign in could have
different roles for example
some one could be an admin others superviser ...and so on

what i have done i have created a xml file called roles.xml
where i specify every user's role in there

now my question is how do i protect the xml file
i have changed my web.config file so any one who tries to access a asp.net
file in a registred user's profiles needs to log in first
eg
in my web.config

deny users ="?"

but when i go to my IE or molizza or whatever browser
when i type the exact link to the xml file it shows without even asking me
to log in first
how can i resolve this issue
how can i protect this xml file?
 
Back
Top