protected override bool AuthorizeCore(IOwinContext owinContext) { var authorized = base.AuthorizeCore(owinContext); if (!authorized) { return(false); } var user = owinContext.GetAppUser <SaleUserViewModel>(); return(user.RoleMenus.Any(u => string.Equals(u.SystemMenu.ControllerAction, $"{ControllerName}_{ActionName}", StringComparison.OrdinalIgnoreCase))); }