我有以下要求来实现访问控制列表

public class SecurityObject{

public string Key{get;set;}

public string DisplayName{get;set;}

public bool isAllowed{get;set;}

}

public class Role{

List AccessibleObjects{get;set;}

}

目前我使用表单身份验证进行基本授权 . 以下是我的代码

的Global.asax.cs

public class MvcApplication : System.Web.HttpApplication

{

public override void Init()

{

this.PostAuthenticateRequest += new

EventHandler(MvcApplication_PostAuthenticateRequest);

base.Init();

}

void MvcApplication_PostAuthenticateRequest(object sender, EventArgs e)

{

HttpCookie authCookie =

HttpContext.Current.Request.Cookies[FormsAuthentication.FormsCookieName];

if (authCookie != null)

{

string encTicket = authCookie.Value;

if (!String.IsNullOrEmpty(encTicket))

{

FormsAuthenticationTicket ticket =

FormsAuthentication.Decrypt(encTicket);

string[] userData = ticket.UserData.Split(new string[] { "___" },

StringSplitOptions.None);

string[] roles = null;

if (userData.Length > 1)

{

roles = userData[1].Split(',');

}

MyCustomIdentity identity = new MyCustomIdentity(ticket);

GenericPrincipal principle = new GenericPrincipal(identity, roles);

HttpContext.Current.User = principle;

}

}

}}

我目前的控制器类

public class AdminController : Controller

{

[HttpPost, Authorize, ValidateAntiForgeryToken]

public ActionResult SaveUser(UserDetailViewModel viewModel)

{

}

}

我的目标控制器类

public class AdminController : Controller

{

[HttpPost, Authorize(ACLKey="USR_SAVE"), ValidateAntiForgeryToken]

public ActionResult SaveUser(UserDetailViewModel viewModel)

{

}

}

我希望我的action方法用ACLKey修饰，我想检查用户角色是否具有给定的密钥，并根据我需要执行或返回HttpUnauthorizedResult页面，即使是来自jQuery的Ajax请求 .

我提到很多像Customizing authorization in ASP.NET MVC但我没有找到一种方法来执行表单身份验证和我的自定义ACLKey检查 .

How do i parse the value USR_SAVE and process custom authentication using CustomAuthorizeFilter？