Obviously, you don’t want just anyone to mess with the reviews and genres that you have posted on
your website. Therefore, it’s important to block access to the Management folder to anyone except site
managers assigned to the Managers role. In this exercise, you see how to modify Web.config to block
the folder so only the user account you assigned to the Managers role earlier can access this folder and
the files it contains.
1 . Open the Web.config file at the root of the site. Scroll all the way down to the closing
tag and right before it type a element. Add a path attribute to the element
and set its value to Management. Note that IntelliSense kicks in to help you complete the element
and fi nd the attribute. Complete the configuration by entering the following settings: