Redirect to another page when user is not authorized in asp.net mvc3

by

The default Authorize attribute behaves in such a way that when the user is not authenticated or authenticated but not authorized then it set the status code as 401 (UnAuthorized). When the filter sets the status code as 401 the ASP.NET framework checks if the website has forms authentication enabled and if it is then redirects to loginUrl parameter set up there.

If you want to change that behavior say you want to redirect the user to an AccessDenied controller if the user is authenticated but not authorized then you have to extend the Authorize attribute and override the HandleUnauthorizedRequest method.

For ex.

public class CustomAuthorize: AuthorizeAttribute
{
    protected override void HandleUnauthorizedRequest(AuthorizationContext filterContext)
    {
        if (!filterContext.HttpContext.User.Identity.IsAuthenticated)
        {
            filterContext.Result = new HttpUnauthorizedResult();
        }
        else
        {
           filterContext.Result = new RedirectToRouteResult(new 
               RouteValueDictionary(new { controller = "AccessDenied" }));
        }
    }
}

You can override the HandleUnauthorizedRequest as per your need and then you have to mark the controller actions to use the CustomAuthorize attribute instead of the built-in one.

More Related Contents:

  1. Passing data between different controller action methods
  2. Why Interface Layer/Abstract classes required in our project? [closed]
  3. Passing object in RedirectToAction
  4. Adding your own HtmlHelper in ASP.NET MVC 3
  5. C# mvc 3 using selectlist with selected value in view
  6. How to use multiple form elements in ASP.NET MVC
  7. Prevent Caching in ASP.NET MVC for specific actions using an attribute
  8. How to get the public IP address of a user in C#
  9. Could not find a part of the path … bin\roslyn\csc.exe
  10. How to get current user, and how to use User class in MVC5?
  11. prevent property from being serialized in web API
  12. How to update a claim in ASP.NET Identity?
  13. ASP.NET MVC Global Variables
  14. Razor: Declarative HTML helpers
  15. asp.net-mvc: razor ‘@’ symbol in js file
  16. When should I use Html.Displayfor in MVC
  17. ViewModel validation for a List
  18. Do asynchronous operations in ASP.NET MVC use a thread from ThreadPool on .NET 4
  19. How to elegantly deal with timezones
  20. ASP.NET MVC Razor render without encoding
  21. Windows Authentication and add Authorization Roles through database – MVC asp.net
  22. How to get current page URL in MVC 3
  23. Assign format of DateTime with data annotations?
  24. POST string to ASP.NET Web Api application – returns null
  25. How to retain spaces in DropDownList – ASP.net MVC Razor views
  26. How do you post a JSON file to an ASP.NET MVC Action?
  27. System.web.mvc missing
  28. How to route EVERYTHING other than Web API to /index.html
  29. Dealing with large file uploads on ASP.NET Core 1.0
  30. Can gzip compression be selectively disabled in ASP.NET/IIS 7?

Leave a Comment