I have made a web application with Form Based Authentication that uses a custom form. Then each user is suppsed to enter the restricted area with their specific permissions. What happens instead is that having set in the Policy for Web Application, "All Authenticated Users" to Full Control, the users retain those permissions even after login.
From how I see things, I have to give users permission or they won't be able to login at all, but they shouldn't retain those permissions.
Is there a way I can set another policy about already logged users and to set them the correct permissions they should invidually have?
Thank you for the help.