Note to self... when using <location> tags in your web.config file, like so:
<location path="SomeFile.aspx"> <system.web> <authorization> <allow users="*"/> </authorization> </system.web> </location>
DO NOT use root-relative paths (AKA "tilde" paths) to specify the path attribute value... otherwise you spend several hours trying to figure out why your location-specific configuration overrides aren't being honored at runtime.
Or so I've heard. <sigh>
Don't blame my employer(s)... all of this is my fault.