2

I am trying to complete login redirect functionality. I prohibited read/write access for default/anonymous for mysite.org/security-page and added NoAccessUrl <setting name="NoAccessUrl" value="/login" />setting. When user visit this page I have an error: error The same error occurs when trying redirect to /404 page.

1

This issue can be caused by modified setting

<setting name="RequestErrors.UseServerSideRedirect" value="false" />

which is false by default.

According to notes in config file If true, Sitecore will use Server.Transfer instead of Response.Redirect. But Server.Transfer is not good option for regular login page redirect because:

ASP.NET does not verify that the current user is authorized to view the resource delivered by the Transfer method. (https://msdn.microsoft.com/en-us/library/y4k58xk7.aspx).

  • 3
    Please elaborate on this answer. As it stands, it does not provide sufficient context or explanation. – Mark Cassidy Nov 17 '16 at 10:02
  • 1
    yes it was patch config which override this setting. but could you please explain how it influence to redirect process? – Vlad Nov 17 '16 at 11:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.