Administration and Management

Figure 14-6

This particular tab allows you to work with the following items:

Custom error mode: This drop-down list applies custom errors for particular users of the application. The default option is Remote Only. This option ensures that errors are redirected only for users who are on a remote machine. The other settings for this drop-down list include On and Off. On turns on the error redirection for all users, whereas the Off setting turns off the error redirecting for all users.

Default redirect URL: The URL to which all errors are redirected.

Inherited custom errors: All the errors that have been inherited from server defaults. These can be redirections for custom errors that are set in the machine.config file.

Local custom errors: The errors that are set by you for this particular application. Error redirections are set using a name/value pair for Status Code/Redirect URL.

Authorization

The third tab is the Authorization tab. This section of the MMC enables you to authorize specific users or groups for the application (see Figure 14-7).

391

Chapter 14

Figure 14-7

This section enables you to create roles made up of multiple users and/or groups. This dialog contains two items:

Inherited authorization rules: All the authorization rules inherited from server defaults. These can be roles that are established in the machine.config file of the server.

Local authorization rules: The authorization rules that you set for this particular application.

From this dialog, you can add, edit, or remove roles that have been created. If you click the Add button, the dialog shown in Figure 14-8 appears.

You can either allow or deny users access to the application by using the Edit Rule dialog. To use this feature, click the appropriate option in the Rule Type section.

The Verbs section allows you to apply a specific rule to those end users retrieving the page via all possible means (HTTP-POST or HTTP-GET), or to narrow the rule to cover only the specific verbs you want using the second option. Remember that the verb of a request is in how the request is actually made. The possible options specify that the request can be made either using HTTP-POST or HTTP-GET.

The final section, Users and Roles, enables you to choose who you want the rule to be applied to: all users that come to the site, anonymous users only, specific users, or users contained within specific groups.

392

Administration and Management

Figure 14-8

Authentication

The fourth tab in the MMC dialog is the Authentication tab (see Figure 14-9). This tab enables you to modify how your application will authenticate users for later authorization.

Figure 14-9

393

Chapter 14

This dialog contains many options because you can work with the authorization of your end users in so many ways. The following list describes some of the items in this dialog:

Application Settings: This section of the dialog lets you set the authentication mode of your application. The options in the drop-down list include Windows, Forms, Passport, or None. If you select Forms, the grayed-out options (shown in Figure 14-9) are available and enable you to modify all the settings that determine how forms authentication is applied.

Membership: The Membership section enables you to tie the membership process to one of the available data providers available on your server. From this section, you can click the Manage Providers button to add, edit, or remove providers.

Roles: From the Roles section, you can enable role-based management by checking the check box. From here, you can also tie the role management capabilities to a particular data provider.

Clicking the Manage Providers button opens the Provider Settings dialog (see Figure 14-10), which enables you to work with the data providers on the server.

Figure 14-10

From the Provider Settings dialog, you can add, edit, or remove providers. You can also edit the settings of a particular provider. To edit any of the options in the dialog, just highlight the property that you want to change and click the Edit button. A new dialog pops up, which enables you to make changes.

Application

The fifth tab, Application, enables you to make more specific changes to the pages in the context of your application. From this dialog, shown in Figure 14-11, you can change how your pages are compiled and run. You can also make changes to global settings in your application.

394