How to set permissions in web.config file?

Question

ASP.NET

Good day!
When implementing authentication / authorization on the site, such a problem arose
when you log out of your account, then some actions should be unavailable, NOOO
if you go to these "forbidden" actions by the address bar, then everything is available
how to fix it?
the internet says

<authorization>
        <deny users="?" />
      </authorization

but then there is such an error:

but there is nothing like that in that file (((

Answer 1

In my opinion in MVC it ​​is better to use AuthorizeAttribute

[Authorize]
public ActionResult Index()
{
    ...
}

[Authorize (Users="admin")]
public ActionResult Edit()
{
    ...
}