401 Unauthorized - Very similar to 403 forbidden but is used when authentication is required and has failed or not been provided.

learn more… | top users | synonyms

1
vote
1answer
59 views

Is HTTP code 401 or 403 appropriate for when a logged in user is not allowed to view the data?

I am looking for a good way to return an error when an unauthenticated/unauthorised user is trying to get a restricted access content from my site. Currently I ask the user to login, check the ...
2
votes
1answer
191 views

Force HTTPS using 301 Redirect on IIS7 gets 401.1 Error

I've got a site that is using an Execute URL in the 403.4 error page slot that calls a page named forcessl.aspx. Here's the contents of the file: strWork = Replace(strQUERY_STRING, "http", ...
1
vote
1answer
140 views

Should I use a 404 or a 403 error for secure content

I have a set of content in my web app that should only be visible if you are logged in. They have not public equivalent, should never be crawled, or otherwise known outside of logged in users of ...
1
vote
0answers
352 views

Different behaviour with windows authentication on IIS7 websites

I need to run a website with just windows authentication. Given the following situation: The location of the default website is: c:\inetpub\wwwroot The location of my code is: c:\Sites\WebApp My ...