页面权限和后台权限问题

[joelbh]

加入页面程序和后台管理程序都在根目录下，而后台程序统一放在manage/目录下，页面需要验证客户登陆，后台需要验证系统用户登陆，在web.config里面该如何设置达到分开验证的效果？
或有其它办法吗？

[saucer]

currently in 1.*, you only have authentication at the root of your web application and the authentication mechanism only allows one authentication page, but you could do something like

say you have directories like

/
--admin
--user

root-level web.cnfig

<configuration>
<system.web>
<authentication mode="Forms">
<forms loginUrl="login.aspx"/>
</forms>
</authentication>
<authorization>
<deny users="?"/>
</authorization>

</system.web>

<location path="user/userlogin.aspx">
<system.web>
<authorization>
<allow users="*"/>
</authorization>
</system.web>
</location>

<location path="admin/adminlogin.aspx">
<system.web>
<authorization>
<allow users="*"/>
</authorization>
</system.web>
</location>

</configuration>


web.config in admin directory


<configuration>
<system.web>
<authorization>
<allow roles="admin" />
<deny users="*" />
</authorization>
</system.web>
</configuration>




web.config in user directory


<configuration>
<system.web>
<authorization>
<allow roles="user" />
<deny users="*" />
</authorization>
</system.web>
</configuration>


in login.aspx, based on the directory in the query string, redirects to adminlogin.aspx or userlogin.aspx