protected virtual bool VerifyControllerAttributes(RouteData routes, Type controllerType, ControllerContext controllerContext) { // Get controller descriptor var controllerDescriptor = controllerDescriptorFactory.Create(controllerType); if (controllerDescriptor == null) return true; // Get action descriptor var actionDescriptor = this.GetActionDescriptor(routes.GetOptionalString("action"), controllerDescriptor, controllerContext); if (actionDescriptor == null) return true; // Verify security var authorizeAttributes = this.GetAuthorizeAttributes(actionDescriptor, controllerContext); return this.VerifyAuthorizeAttributes(authorizeAttributes, controllerContext, actionDescriptor); }