public override void OnActionExecuting(ActionExecutingContext filterContext) { if (filterContext == null || !SecurityProvider.HasPermission(filterContext.HttpContext.User.Identity.Name, AllowedPermissions)) { filterContext.Result = new RedirectToRouteResult(new RouteValueDictionary { { "Controller", "App" }, { "Action", "PermissionDeniedError" } }); } base.OnActionExecuting(filterContext); }