Restrict direct access to cmspages

Try the following code snippet for restrict specific pages -

 <location path="CMSModules/MessageBoards/CMSPages/Message_Edit.aspx">
<system.webServer>
    <security>
        <authorization>
            <remove users="*" roles="" verbs="" />
            <add accessType="Allow" users="" roles=""/>
        </authorization>
    </security>
</system.webServer>
</location>
<location path="CMSModules/Membership/CMSPages/ResetPassword.aspx">
<system.webServer>
    <security>
        <authorization>
            <remove users="*" roles="" verbs="" />
            <add accessType="Allow" users="" roles=""/>
        </authorization>
    </security>
</system.webServer>
</location>

Reference : https://docs.xperience.io/k11/securing-websites/deploying-websites-to-a-secure-environment/restricting-access-to-directories

Hi Thanks Vasu, i tried what you have suggested already and did not work. i tried adding inside CMSModules folder web.config and in root site web.config no luck

Please try with add this on root web.config only and not required to add this web.config under CMSModules.

I have tested this Kentico 12 and working fine.

Let me know if you are getting any error.

Sorry for delay. not getting any error or event but able to reach page. The Problem was resolved more of access path based on website settings. Thanks