Hello,

I'm building an ASP.NET application with just one page (default.aspx). This page works like a template page which loads a specific user control (.ascx) when the user selects a menu item. These ascx files are organized in subdirectories. I want to restrict access to the ascx files in these subdirectories to certain NT groups. I know it is possible to restrict access to aspx files in subdirectories in the web.config like this:

<configuration>
	<location path="somesubdir">
		<system.web>
			<authorization>
				<allow roles="somegroup" />
				<deny users="*" />
			</authorization>
		</system.web>
	</location>
</configuration>

This works file for aspx files, but has no affect on ascx files.
Is there a way to restrict access to ascx files like the forementioned way for aspx files or should I go another route?
Any ideas?


TIA,

Martin