The UrlAuthorizationModule.CheckUrlAccessForPrincipal(string, System.Security.Principal.IPrincipal, string) method checks to see whether the current user is granted access to the requested file in the Web.config file for the application.

If the HTTP verb used to make the request is GET, POST, or HEAD, the UrlAuthorizationModule.CheckUrlAccessForPrincipal(string, System.Security.Principal.IPrincipal, string) method checks for read access to the file. If any other verb is used, the UrlAuthorizationModule.CheckUrlAccessForPrincipal(string, System.Security.Principal.IPrincipal, string) checks for read/write access to the file.

For more information and an example Web.config file, see the System.Web.Security.UrlAuthorizationModule class documentation.