CODEWITHSUNDEEP
asp.netasp.net-mvc-2elmahsecurity
Jedi Master Spooky
Jedi Master Spooky

Reputation: 5809

Secure elmah with ASp.NET security but only to some users

HI, I am developing a ASP.NET App and I want to add elmah. The problem I have is the the users login to the site and the only way I found to secure elmah is to authenticate users, not a specific user.

I am using ASP.NET MVC 2 and NET 4.

Any Ideas?

Upvotes: 1

Views: 957

Answers (1)

JasonCoder
JasonCoder

Reputation: 1136

You'll want to restrict the elmah.axd (assuming you're using the handler) to a specific user role. Not just all authenticated users.

<!-- Deny unauthenticated users to see the elmah.axd -->
<location path="admin/elmah.axd">
  <system.web>
    <authorization>
      <allow roles="Admins" />
      <deny users="*" />
    </authorization>
  </system.web>
</location>

Phil Haack has a good write up on the subject.

Upvotes: 3

Related Questions