public override void OnException(HttpActionExecutedContext actionExecutedContext) { var exceptionType = actionExecutedContext.GetType(); if (exceptionType == typeof(UnauthorizedAccessException)) { actionExecutedContext.Response = new HttpResponseMessage(HttpStatusCode.Unauthorized); } }