We have a site (asp.net on IIS) that implements forms authentication. Some sections of the site are locked down and require registration, some are open to the public.
This site is actively under development and we need to temporarily restrict access to this entire site, only permitting access to the development team, but without altering the underlying forms authentication mechanism.
Is the a way we can do this within IIS without altering the web.config of the site?