c# - Windows Identity Framework on ASP.NET MVC - how to authorize user per action basis? -

windows identity framework on asp.net mvc - how authorize user per action basis?

like:

    [authorize]     public actionresult about()     {         return view();     } 

instead of whole site level security default wif site integration behaviour?

update: maybe should question goes like, how allow anonymous users access site too?

well turns out, authorization element has set in web.config.

default like:

    <authorization>         <deny users="?" />     </authorization> 

which mean deny anonymous users.

but in mvc should like:

    <authorization>         <!--<deny users="?" />-->     </authorization> 

which mean allow users, , leave application handle authentication.

so mean default wif setting have reverted:

from:

<authentication mode="none" /> 

to like:

<authentication mode="forms">   <forms loginurl="~/account/logon" timeout="2880" /> </authentication> 

that so, per action authorization in mvc works. nice. :)

more on authorization: http://msdn.microsoft.com/en-us/library/wce3kxhd.aspx