restrict user access to controller based on property in object (asp.net mvc)

Question

What is the best way to control user access to a controller. I have local User object with a property(boolean - "IsSubscribed"). Users can only access the controller if the value is true.

Notes:

I use forms authentication, but NO .net membership/profile etc.

mvc version 2

Darin Dimitrov · Accepted Answer · 2011-03-21 06:57:13Z

2

You could write a custom Authroize attribute:

public class CustomAuthorizeAttribute : AuthorizeAttribute
{
    protected override bool AuthorizeCore(HttpContextBase httpContext)
    {
        var isAuthorized = base.AuthorizeCore(httpContext);
        if (isAuthorized)
        {
            // Perform your custom authorization and return true/false
        }
        return isAuthorized;
    }
}

and then decorate your controller/actions with this attribute.

answered Mar 21, 2011 at 6:57

Darin Dimitrov

1.0m276 gold badges3.3k silver badges3k bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

maX Over a year ago

1.So do we go like [Authorize(...)] public ActionResult myAction() (or) [CustomAuthorize(...)] public ActionResult myAction()

Darin Dimitrov Over a year ago

@maxxxee, [CustomAuthorize] public ActionResult MyAction() { ... }

Collectives™ on Stack Overflow

restrict user access to controller based on property in object (asp.net mvc)

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related