Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I have an ASP.NET MVC 3 application and am testing the controllers. My scenario is a common one – access to all pages requires authentication (save the Login page). I want to write tests to make sure that each controller action only allows access if the user is authenticated and authorized, but it seems strange to make this identical test for what could be hundreds of actions.
How is this usually handled?
Are you using the Authorize attribute which comes with MVC? If so, you could do a test, that through reflection inspect all actions on all controllers and verifies, that the Authorize attribute is present.