how to implement custom authorization in asp.net mvc 3?

Question

Looking for a custom authorization solution for a asp.net mvc 3 application with sql server 2008. I dont want to use the ASPNETDB.mdf though.

At the moment I am trying to use a customactionfilter but I dont know how to return a boolean here. Does anyone have a good sample of a similar scenario?

public class CustAuthFilterAttribute : ActionFilterAttribute, IActionFilter
{

public string Roles {get;set;}
public override void OnActionExecuting(ActionExecutingContext filterContext)
        {
           //return true/false based on Role the user has
            base.OnActionExecuting(filterContext);
        }
}

Community · Accepted Answer · 2017-05-23 12:27:51Z

1

You should be deriving from AuthorizeAttribute if you want to implement custom authorization.

This answer gives you a short example in how to use it.

public class CustomAuthorizeAttribute : AuthorizeAttribute
{
    protected override bool AuthorizeCore(HttpContextBase httpContext)
    {
        // check context and roles

        ...

        return true;
    }
}

edited May 23, 2017 at 12:27

CommunityBot

11 silver badge

answered Jun 28, 2012 at 2:56

Lester

4,4133 gold badges30 silver badges31 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Adam Tuliper Over a year ago

Actually if I recall you need to ensure you call base.AuthorizeCore because of caching issues and the base handles it.

Collectives™ on Stack Overflow

how to implement custom authorization in asp.net mvc 3?

1 Answer 1

1 Comment

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Linked

Related