public override void OnAuthorization(AuthorizationContext filterContext) { if (!SessionInfo.CheckIfUserHasAnyRole()) { throw new UnauthorizedAccessException(); } }