public override void OnAuthorization(AuthorizationContext filterContext)
{
if (SkipAuthorization(filterContext))
{
return;
}
var user = HttpContext.Current.Session["LoggedInUser"] as User;
if (user == null)
{
filterContext.Result = new RedirectToRouteResult(new RouteValueDictionary
(new
{
Controller = "User",
Action = "UserLogin",
returnUrl = filterContext.HttpContext.Request.Url.GetComponents(UriComponents.PathAndQuery, UriFormat.SafeUnescaped)
}));
}
else
{
var userId = user.UserId;
bool isUserSuperAdmin = UserAuthorization.IsUserSuperAdmin(userId);
if (isUserSuperAdmin)
{
return;
}
var rd = filterContext.RequestContext.RouteData;
string currentAction = rd.GetRequiredString("action");
string currentController = rd.GetRequiredString("controller");
string currentArea = rd.Values["area"] as string;
bool isUserAuthorizedAthorizedInAction = UserAuthorization.IsUserAthorizedInAction(userId, currentController, currentAction);
if (!isUserAuthorizedAthorizedInAction)
{
filterContext.Result = new RedirectToRouteResult(new RouteValueDictionary
(new
{
Controller = "User",
Action = "UserLogin",
returnUrl = filterContext.HttpContext.Request.Url.GetComponents(UriComponents.PathAndQuery, UriFormat.SafeUnescaped)
}));
}
}
}