ASP.NET web.config授权设置被忽略

I have an asp.net (dynamic data) website set up as an application in a subdirectory of another site. This site requires different security settings from the top level site. Something like:I have an asp.net (dynamic data) website set up