Dynamic Controller and Action Authentication in ASP.NET MVC 2 by Ryan Wright
My friend and colleague Ryan Wright has posted a fantastic article about dynamic controller and action authentication in ASP.NET MVC 2. His techniques describe an architecture without hard-coding roles into the Authorize attribute – which makes it possible to add roles to application functionality strictly through configuration – no application rebuild required. He also provides [...]