ببین دوست من این web.config یکی از پروژه های منه که با formsauthentication بود و جواب هم داد و خاصیت location ]م داخلش استفاده شده:
<?xml version="1.0"?>
<!--
Note: As an alternative to hand editing this file you can use the
web admin tool to configure settings for your application. Use
the Website->Asp.Net Configuration option in Visual Studio.
A full list of settings and comments can be found in
machine.config.comments usually located in
\Windows\Microsoft.Net\Framework\v2.x\Config
-->
<configuration>
<appSettings>
<add key="ConnectionInfo" value="server=;UID=;PWD=;Database="/>
</appSettings>
<connectionStrings/>
<system.web>
<!--
Set compilation debug="true" to insert debugging
symbols into the compiled page. Because this
affects performance, set this value to true only
during development.
Visual Basic options:
Set strict="true" to disallow all data type conversions
where data loss can occur.
Set explicit="true" to force declaration of all variables.
-->
<compilation debug="true" strict="false" explicit="true"/>
<pages>
<namespaces>
<clear/>
<add namespace="System"/>
<add namespace="System.Data"/>
<add namespace="System.Data.Sqlclient"/>
<add namespace="System.Collections"/>
<add namespace="System.Collections.Specialized"/>
<add namespace="System.Configuration"/>
<add namespace="System.Text"/>
<add namespace="System.Text.RegularExpressions"/>
<add namespace="System.Web"/>
<add namespace="System.Web.Caching"/>
<add namespace="System.Web.SessionState"/>
<add namespace="System.Web.Security"/>
<add namespace="System.Web.Profile"/>
<add namespace="System.Web.UI"/>
<add namespace="System.Web.UI.WebControls"/>
<add namespace="System.Web.UI.WebControls.WebParts"/>
<add namespace="System.Web.UI.HtmlControls"/>
</namespaces>
</pages>
<authentication mode="Forms">
<forms name="MYWEBAPP.ASPXAUTH" loginUrl="Login.aspx" defaultUrl="default.aspx" protection="All" path="/" timeout="60" />
</authentication>
<authorization>
<allow users="*"/>
</authorization>
<sessionState timeout="20" mode="InProc">
</sessionState>
<customErrors mode="Off"></customErrors>
</system.web>
<location path="Admin" allowOverride="true">
<system.web>
<authorization>
<allow roles="Administrator"/>
<deny users="*"/>
</authorization>
</system.web>
</location>
<location path="Builder" allowOverride="true">
<system.web>
<authorization>
<allow roles="Builder"/>
<deny users="*"/>
</authorization>
</system.web>
</location>
</configuration>
ضمنا من واسه اختصاص رل به کاربرم این کد رو می نوشتم:
Public Function AdminLogin(ByVal USR_NM As String, ByVal USR_PSWD As String) As Boolean
Try
FormsAuthentication.Initialize()
Dim sqlda As New SqlDataAdapter("Login", Con)
sqlda.SelectCommand.CommandType = CommandType.StoredProcedure
sqlda.SelectCommand.Parameters.Add("@USR_NM", SqlDbType.NVarChar).Value = USR_NM
sqlda.SelectCommand.Parameters.Add("@USR_PSWD", SqlDbType.NVarChar).Value = FormsAuthentication.HashPasswordForStoringInConfig File(USR_PSWD, "md5")
Dim ds As New DataSet
sqlda.Fill(ds)
If ds.Tables(0).Rows.Count <> 0 Then
Dim ticket As FormsAuthenticationTicket
If ds.Tables(0).Rows(0).Item("USR_IS_ADMN") = True Then
ticket = New FormsAuthenticationTicket(1, ds.Tables(0).Rows(0).Item("USR_ID") & "-" & ds.Tables(0).Rows(0).Item("USR_RL_NM") & "-Admin", DateTime.Now, DateTime.Now.AddMinutes(20), True, "Administrator", FormsAuthentication.FormsCookiePath)
ElseIf ds.Tables(0).Rows(0).Item("USR_IS_ADMN") = False Then
ticket = New FormsAuthenticationTicket(1, ds.Tables(0).Rows(0).Item("USR_ID") & "-" & ds.Tables(0).Rows(0).Item("USR_RL_NM") & "-Builder", DateTime.Now, DateTime.Now.AddMinutes(20), True, "Builder", FormsAuthentication.FormsCookiePath)
End If
Dim hash As String = FormsAuthentication.Encrypt(ticket)
Dim cookie As New HttpCookie(FormsAuthentication.FormsCookieName, hash)
If ticket.IsPersistent Then cookie.Expires = ticket.Expiration
HttpContext.Current.Response.Cookies.Add(cookie)
Return True
Else
Return False
End If
Catch ex As Exception
Return False
End Try
End Function
البته این کد مال خیلی وقت پیشه و مطمعنا ایراد هایی هم شاید داشته باشه اما خوب واسه من جواب داد و روی هاست هم مشکلی نداشت .