title: Specific page security on web.config
body: <p>I have the following on my web.config</p>
  
  <pre><code>&lt;location path = "WebPages/Reports"&gt;
      &lt;system.web&gt;
          &lt;authorization&gt;
              &lt;deny roles="DeniedRole1, DeniedRole2"/&gt;
              &lt;allow roles="AllowRole1,AllowRole2,AllowRole3"/&gt;
          &lt;/authorization&gt;
      &lt;/system.web&gt;
  &lt;/location&gt;
  &lt;location path = "WebPages/Reports/SpecificPage.aspx"&gt;
      &lt;system.web&gt;
          &lt;authorization&gt;
              &lt;allow roles ="*"/&gt;
          &lt;/authorization&gt;
      &lt;/system.web&gt;
  &lt;/location&gt;
  </code></pre>
  
  <p>Basically what I'm trying to do is for everyone to have access to the SpecificPage.aspx, but for any other page inside the Reports folder it should apply the deny/allow rules. However, this is giving me the following error:</p>
  
  <pre><code>Parser Error Message: Authorization rule names cannot contain the '*' character.
  </code></pre>
  
  <p>Any help is appreciated!</p>