views:

83

answers:

0

Hi,

I am working with asp.net mvc with the forms authentication cookieless UseUri and i did as below.

  1. Create a new asp.net mvc 2 application
  2. Edit web.config and add cookieless="UseUri" to the Forms tag (line 25 on a new project)
  3. Open HomeController.cs and add [Authorize] before the About method.
  4. Hit F5 to run the project.
  5. Click the Register link and create a new user.
  6. Login and click on the about Tab. You should have access.
  7. Copy the Url of the About Page now.
  8. Now click logout on the top right.
  9. click the home tabe and then the about tab again
  10. It will prompt you to login thus showing that the About action method required an authorized user.
  11. Paste the Url what you copied in the step 7, You will get the access to the page.

If you are doing like this you will get not only the About Page but also to all the pages which is required to authorize.

help me please...