Question

I’ve got an ASP.NET MVC 3 site with an admin panel (don’t we all? 🙂 – I’ve used my own solution for a very secured login system.

Now, on each view in the admin controller I need to make checks that the user is logged and has the proper authorization, so each time I run the same verification and authorization methods on each view separately.

How could I make the same checks for all the requests to a certain controller? (I mean, right all the checks only once and in one place)

(I also would like to have an exception, so I could allow user to use the login page inside the admin controller and outside of it)

Thanks!

Answer 1

Use an attribute on the controller. Either the standard AuthorizeAttribute (see this) or write your own.