Force ImageResizer to authorize images larger than thumbnail based on user role in ASP.NET MVC

Global.asax.cs

protected void Application_Start() 
{
  // various setup bits here...
  
  Config.Current.Pipeline.AuthorizeImage +=
  delegate (IHttpModule sender, HttpContext context, IUrlAuthorizationEventArgs e)
  {
    // only restrict ~/media
    if (!e.VirtualPath.StartsWith(VirtualPathUtility.ToAbsolute("~/media")))
    {
      return;
    }

    var estimatedSize = ImageBuilder.Current.GetFinalSize(new System.Drawing.Size(1000, 1000),
      new ResizeSettings(e.QueryString));
    if (estimatedSize.Width <= 300 || estimatedSize.Height <= 300)
    {
      // it's 300px or less, let it go
      return;
    }

    var roles = UserRoleHelper.RolesForUser(context.User.Identity);
    e.AllowAccess = UserRoleHelper.RoleMayAccessFile(roles, e.VirtualPath, VirtualPathUtility.ToAbsolute("~/media/armstrong"));
  };
}