title: ASP.NET web.config authorization - Allow access to root but not child folders/pages
body: <p>I want the login page to be the root of my site www.mysite.com/ (default route) and then have all other folders/pages below that require the user to be logged in. </p>
  
  <p>Is there any easier way than using the following as the global rule and then specifying a deny rule for each child under a location element:</p>
  
  <pre><code>&lt;authorization&gt;
    &lt;allow users="?"/&gt;
  &lt;/authorization&gt;
  
  &lt;location path="/SubFolder1"&gt; &lt;!-- repeat for each child --&gt;
     &lt;system.web&gt;
        &lt;authorization&gt;
           &lt;deny users="?"/&gt;
        &lt;/authorization&gt;
     &lt;/sysetm.web&gt;
  &lt;/location&gt;
  </code></pre>