protected override bool AuthorizeCore(HttpContextBase httpContext) { var user = AsyncHelpers.RunSync<AdministratorDTO>(() => { return httpContext.GetAdministrator(); }); return user.IsSuper && base.AuthorizeCore(httpContext); }