Question

Our internal MVC application uses Windows authentication and we control access to the web by adding each user to the web.config (shown below). Question is: Can we grant access to a group by adding

<security>
<authorization>
<add accessType="Allow" users="eur\johnsmith"/>
</authorization>
</security> 

Is there anything else we need to get this to work ?

Answer 1

In ASP.NET MVC it’s best to add access directly to Action Methods (or Controllers as a whole):

[Authorize(Roles = @"eur\johnsmith")]
public ActionResult YourActionMethod()
{
    return View();
}