Asp.net IsAuthenticated

You can make a class with this function and you can call it in the masterpage . If you don't use a masterpage , yes , you have to call it in everypage . Recomandation : Use masterpages ( more about them look here http://www.asp.net/Learn/master-pages/)

Use FormBased Authentication and declare the Login.aspx as Login Url in web.config. The users will be redirected to the Login page whenever the application finds they are not authenticated.

I do use masterpage and yes the section:
    <authentication mode="Forms">
      <forms loginUrl="Login.aspx" defaultUrl="Default.aspx" />
    </authentication>
..is there allready.
But I can still go to any page without being loged in, besides I need to have a few pages that are open for all.

So if I want to use the master page to do this how would the code look like and in what event in masterpage, same thing as I did on the single page?.

can you post the web.config file. I would like to check the <authorization> section.

There is no authorization section, only authentication, membership , roleManager and profile sections (except for non related like connectionStrings and such).

Try adding <authorization> in web.config

<authentication mode="Forms">
      <forms loginUrl="~/Login.aspx"></forms>
    </authentication>

    <authorization>
      <allow users="*"/>
      <deny users="?"/>
    </authorization>

Also you have mentioned that you need to allow anonymous access to certain pages.

Create a folder. for ex. "Folder1" and include the following section in web.config just before </configurations>

  <location path="Folder1">
      <system.web>
         <authorization>
            <allow users="?,*"/>
         </authorization>
      </system.web>
   </location>

If you wan't for any individual files you have to create individual <location> tag to the path specifying the filenames.

No joy,
I can still access different pages without being logged in, I do the debug on the VS provided browser, but it should work there to without having to publish it to IIS.

Thanks for the location tip, will try that once I get the deny thingy to work

Please post the full web.config. Let me have a check

I went to the ASP.net configuration site, it added the:
    <authorization>
      <deny users="?" />
    </authorization>

..section and now it seems to work, will try the 'location' thingy also, I'll be back soon.

Maybe it was that the '<allow users="*"/>' should be below deny I guess the order is important, if its needed at all in this case that is since everything thats not = ? is a logged in user.

I went with making the whole site allowed for anonymous users (since the permissions are inherited) and made a folders for member where I have the pages needing login.

This is working fine, strange thing is that there is no <authorization> or <location path> section in web.config, I guess this is stored in the sql server db using the <roleManager>.

Comfirm if you know it works like that please.

Thanks for your help