This project is read-only.

New Installation: Anonymous users: Access Denied to all folders

Topics: Administration, Installing Orchard
May 30, 2012 at 8:22 PM
Edited May 30, 2012 at 8:38 PM

I just did a fresh install and noticed a security issue.  While logged in as the 'admin' everything is fine, but when you log out, access is denied to all folders.  I haven't looked at the source yet, but did some one mark some classes requiring authorization?

May 31, 2012 at 2:45 AM
Edited May 31, 2012 at 2:49 AM

Apparently the site will not work correctly if the following line is removed/commented out, even if the obsolete/offending sections of the web.config are removed/commented out:

<validation validateIntegratedModeConfiguration="false" />

Since setting this to "false" in production is not an option, is anyone working a configuration that is 100% IIS 7 compliant?  Setting this to "false" also makes it impossible to track down certain runtime errors.