ASP.NET MVC 使用 Web.config 限制可访问的Controller

<configuration><location path="Home"><system.web><authorization><allow users="*"/></authorization></system.web></location><location path="Account"><system.web><authorization><allow users="*"/></authorization></system.web></location><!-- 禁止其他所有控制器 --><system.web><authorization><deny users="*"/></authorization></system.web>
</configuration>

如上设置的结果是: Home,Account 这2个Controller 可以访问，除此之外其它Controller 的访问将报：

401 - Unauthorized: Access is denied due to invalid credentials.