ASP.NET MVC Roles Authorization

I want to make the roles default for my controller class to "Administrators, Content Editors"

[Authorize(Roles = "Administrators, Content Editor")]

I've done this by adorning the controller with the attribute above. However, there is one action that I want to be available to all (namely "View"). How can I reset the Roles so that everyone (including completely unauthorized users) have access for this action.

Note: I know I could adorn every single action other action with the authorize attribute above but I don't want to have to do that all the time. I want all of the controllers actions to be unacessible by default so that if anyone adds an action they have to make a considered decision to make it available to the general public.

Cheers...

From stackoverflow

• The only solution I can think of so far is to create and register another controller so that I have one for anonymous access, and one for authorized access but that's not quite as elegant as I would have liked.

• You can place the Authorize attribute on the action methods. Not just at the class level.

  So, move the attribute from the controller class to just the action methods you want to secure.

  Owen Thomson : Hi Kieron, thanks for the response. As the Note part of my question stated I'm aware this is possible but I want the default for the controller actions to be unaccessible without having to adorn them with the authorize attribute.

• So are you wanting something like http://stackoverflow.com/questions/780436?

  Owen Thomson : Yup - looks about right ... wish this was inbuilt to the std controllers but not a big effort to code for. Thanks for linking me up.