Redirect Authorization failure in mvc

Question

I have been doing this research for 2 days now, but i cant seem to find the answer.

How to redirect user to a specific page This is what I have now:

<authentication mode="Forms">
  <forms loginUrl="~/Account/Member/LogOn" timeout="2880" />
</authentication>

What i want to do is if user isn't authenticated redirect to this url: ~/Account/Member/LogOn" but if the user is already authenticated but not authorized, I want to redirect to this url: ~/Account/Member/Unauthorized"

Is there anyway to do this without creating a custom authentication attribute?'

Thanks

Is this for a specific controller or all? – Tae-Sung Shin Aug 16 '11 at 15:39 — Tae-Sung Shin, Aug 16 '11 at 15:39
Controller that I use [Authorize(role="admin")] on – Dhana Aug 16 '11 at 15:43 — Dhana, Aug 16 '11 at 15:43

score 2 · Accepted Answer · edited May 23 '17 at 10:30

2

You can make a base controller class and override OnActionExecuting method and then inherit that controller. See following reference for details.

How to redirect from OnActionExecuting in Base Controller?

edited May 23 '17 at 10:30

Community

1
1

answered Aug 16 '11 at 15:46

Tae-Sung Shin

20,215
33
138
240

score 1 · Answer 2 · answered Aug 16 '11 at 15:44

The above code works with the [Authorize] attribute so that if the user doens't match the Authorize criteria or not authenticiated then they are bounced to the loginUrl Url.

For example,

[Authorize] just checks that they are authenticated.

[Authorize(User="User1")] and [Authorize(Roles="Manager")] both require authentication and to match the authorization criteria specified.

However, I don't think you can redirect differently for each.

Redirect Authorization failure in mvc

2 Answers2

Linked