Question

Is there a way to override Authorize annotation in ASP.Net?

I’m using MVC and my controller is annotated with:

[Authorize(Roles="Admin")]

The majority of actions in this controller are restricted to Admin users.

I would like to override one action method so that it becomes available to all users:

[HttpPost]
[Authorize(Users="*")]        
public Boolean Submit(FormCollection collection)

This is not working and users are being re-directed to login page. What am I doing wrong?

Thank you.

Answer 1

I think you should be able to achieve what you are trying to do by simply removing the attribute from controller and move it to methods only where needed.