ASP.NET MVC Authorization


How do I achieve authorization with MVC

7/16/2010 9:14:02 AM

Accepted Answer

Use the Authorize attribute

public ActionResult MyAction()

You can also use this on the controller. Can pass in users or roles too.

If you want something with a little more control, you could try something like this.

 public class CustomAuthorizeAttribute : AuthorizeAttribute
        protected override bool AuthorizeCore(HttpContextBase httpContext)
            string[] users = Users.Split(',');

            if (!httpContext.User.Identity.IsAuthenticated)
                return false;

            if (users.Length > 0 &&
                return false;

            return true;
4/4/2009 4:03:23 PM

There is an Authorization feature with MVC, using ASP.NET MVC beta and creating the MVC project from Visual Studio, automatically adds a controller that used authorization. One thing that will help with your google search, is that it is a "filter". So try searching on "Authorization Filter MVC" and anything preview 4 or greater will help.

Licensed under: CC-BY-SA with attribution
Not affiliated with: Stack Overflow