how to assign a role to access only a particular page in asp

Question

I had asp.net pages called Loan.aspx and Details.aspx which are not under any folder and Loan.aspx page has to be accessed by only role who is employee and Details.aspx page should be accessed by any authenticated user. Could u plz tell me how to configure this in web application web.config file.

Biswa Pujarini Mohapatra · Answer

Add the role in the location tag of web.config example if you want only administrator can access the page ---- You may add verbs as per the requirement like for Only Post Data (verbs=post) --- now Deny all roles and users this follows the TOP to DOWN approach