Page History: Custom AuthorizeAttribute - ASP.NET MVC

Compare Page Revisions

0 Current 0

« Older Revision - Back to Page History - Current Revision

Page Revision: Tue, Feb 19, 2013, 10:04 AM

using System.Web.Mvc;

public class AppAuthorizeAttribute : AuthorizeAttribute
{
    private string _controllerTypeName = string.Empty;

    public override void OnAuthorization(AuthorizationContext filterContext)
    {
        _controllerTypeName = filterContext.Controller.GetType().FullName;
        base.OnAuthorization(filterContext);
    }
    /// <returns>True if the user is authorized; false otherwise.</returns>
    protected override bool AuthorizeCore(System.Web.HttpContextBase httpContext)
    {
        var userLoginName = httpContext.User.Identity.Name;
        // TODO: write specialized authorization code here based on _controllerTypeName and userLoginName
        return base.AuthorizeCore(httpContext);
    }
}