Question

If the authorize attribute has been applied to the controller is it possible to allow unauthorized access to an action/viewresult inside that controller?
Say for example I didn’t want authorization to occur on Test2 in the following:

[Authorize]
public class TestController : Controller
{

    public ViewResult Test()
    {
        return View();
    }

    public ViewResult Test2()
    {
        return View();
    }
}

Thanks in advance.

Answer 1

No, this is not possible. You will have to apply the Authorize attribute on the Test action and not on the controller. Another possibility is to put the Test2 action on another controller which is not decorated with this attribute.