title: Allow anonymous access to specific URL in web.config
body: <p>This site is running PHP on IIS 7.5, and access to the site is restricted to an Active Directory group via the web.config, as follows:</p>
  
  <pre><code>&lt;security&gt;
      &lt;authorization&gt;
          &lt;remove users="*" roles="" verbs="" /&gt;
          &lt;add accessType="Allow" roles="DOMAIN\AD-GROUP" /&gt;
      &lt;/authorization&gt;
   &lt;/security&gt;
  </code></pre>
  
  <p>The only URL rewriting being done is to send most URLs to <code>index.php</code>, and CodeIgniter handles routing after that. </p>
  
  <p>There's a specific URL pattern that needs to be exposed to users not in that specific Active Directory group, however. It's not a file, which I believe the <code>&lt;location&gt;</code> tag is used for; it needs to be based on the URL.</p>
  
  <p>Additional context: this is for a URL pattern in a single page/AngularJS application. An example: in a project management application, users of the app can create tasks, upload files, post notes (e.g., <a href="http://domain/#/project/1234/tasks" rel="nofollow noreferrer">http://domain/#/project/1234/tasks</a>). All of those users are in the <code>AD-GROUP</code> group. For each project, there's a cover page of sorts for the project that can be given out to non-users within the organization (<a href="http://domain/#/project/1234/public" rel="nofollow noreferrer">http://domain/#/project/1234/public</a>). They won't be in that specific AD group, but they need to view that page.</p>
  
  <p>Is this possible to do in the web.config, given that it's based on the hash in the URL? If not, what's an alternate way to restrict based on an AD group if not the web.config?</p>