[ASP.NET2.0]限制web用户对指定目录下的特定类型文件的访问

默认配置下,通过配置web.config文件,比如下边的形式:

<? xml version="1.0" encoding="utf-8" ?>
< configuration  xmlns ="http://schemas.microsoft.com/.NetConfiguration/v2.0" >
     < system .web >
         < authorization >
             < allow  roles ="Members"   />
             < allow  roles ="Administrators"   />
             < deny  users ="*"   />
         </ authorization >
     </ system.web >