I have created application and implemented ELMAH logging. In my site there are three types of users.
If you're using Roles you can add this to your web.config:
If you're not using roles you will have to specify each user you want to give access to:
Update:
As you aren't using any of the built in authentication/authorisation and you don't have control of the elmah page you're going to have to handle the BeginRequest() event:
protected void Application_BeginRequest()
{
if(Request.Url.AbsolutePath.ToLowerInvariant().Contains("elmah.axd"))
{
// Check if user can see elmah and handle unauthorised users (return 401/redirect to login page/etc...)
}
}