I have an internet site using MOSS 2007/win 2008/SQL 2005. Users are authenticated using forms authentication.
All authenticated users are able to browse pages like: /Style%20Library/Forms/AllItems.aspx or _layouts/viewlsts.apsx
They can view XSL files and even download a copy of it.
How can I restrict users from accessing these pages without affecting their browsing experience?
Note: I have activated the ViewFormPagesLockdown feature and made sure anonymous users are not able to access these pages.