Navigation

	Home Page
	Index
	All Pages

Contributor Links

	Create a new Page
	Administration
	File Management
	Login/Logout
	Your Profile

Other Wiki Sections

Software

Custom AuthorizeAttribute - ASP.NET MVC

using System.Web.Mvc;

public class AppAuthorizeAttribute : AuthorizeAttribute
{
    private string _controllerTypeName = string.Empty;

    public override void OnAuthorization(AuthorizationContext filterContext)
    {
        _controllerTypeName = filterContext.Controller.GetType().FullName;

        // The following line calls the AuthorizeCore method, below.
        base.OnAuthorization(filterContext);
    }
    /// <returns>True if the user is authorized; false otherwise.</returns>
    protected override bool AuthorizeCore(System.Web.HttpContextBase httpContext)
    {
        var userLoginName = httpContext.User.Identity.Name;
        // TODO: write specialized authorization code here based on _controllerTypeName and userLoginName
        return base.AuthorizeCore(httpContext);
    }
}