AuthorizeForAttribute.cs

AuthorizeForAttribute.cs

public class AuthorizeForAttribute : AuthorizeAttribute
{
	protected override void HandleUnauthorizedRequest(AuthorizationContext filterContext)
	{
		if(filterContext.HttpContext.Request.IsAjaxRequest())
		{
			// filterContext.Result = new HttpStatusCodeResult(401, "Unauthorized");
			filterContext.Result = new HttpStatusCodeResult(403, "Forbidden");
		}
		else if(filterContext.HttpContext.User.Identity.IsAuthenticated)
		{
			filterContext.Result = new RedirectResult("~/Error/AccessDenied?For=" + filterContext.HttpContext.Request.Url);                    
		}
		else
		{
			base.HandleUnauthorizedRequest(filterContext);                
		}
	}
}