"Secure" Royalty Controller

RoyaltyController

using System.Web.Mvc;

namespace WebApplication.Controllers
{
    public class RoyaltyController : Controller
    {
        public ActionResult Index()
        {
            return View();
        }
        
        [Authorize(Roles="Admin")]
        public ActionResult Edit(string authorID, string titleID)
        {
            return View(WebApplication.Data.DataServices.GetRoyalty((DataAccess.Data)Session["pubs"],authorID, titleID));
        }

    
        [HttpPost]
        [Authorize(Roles="Admin")]
        public ActionResult Edit(DataAccess.DTO.Royalty value)
        {
            return View(WebApplication.Data.DataServices.UpdateRoyalty((DataAccess.Data)Session["pubs"], value));
        }
    }
}