---
title: "Require authorization within whole ASP .NET MVC application"  
description: "Require authorization within whole ASP .NET MVC application"  
author: "marcel ethan"  
published: 2015-01-15  
updated: 2015-01-15  
canonical: https://www.mindstick.com/forum/12862/require-authorization-within-whole-asp-dot-net-mvc-application  
category: "asp.net"  
tags: ["c#", "asp.net mvc", "mvc5", "authorization"]  
reading_time: 1 minute  

---

# Require authorization within whole ASP .NET MVC application

I create [application](https://www.mindstick.com/articles/12824/calculator-application-in-android) where every [action](https://www.mindstick.com/forum/155752/what-is-action-result-with-its-types) beside those which enable [login](https://www.mindstick.com/articles/12852/styles-login-form-in-android) should be out of [limits](https://answers.mindstick.com/qa/34268/what-are-the-gov-limits-in-the-salesforce-com) for not logged user.

Should I [add](https://www.mindstick.com/forum/12983/add-address-in-textbox-when-page-is-load-and-if-i-search-address-in-textbox-show-in-map-by-javascript) [[Authorize](https://www.mindstick.com/forum/326/integrating-authorize-dot-net-in-vb6-application)] annotation before every [class](https://www.mindstick.com/blog/165/generic-class-in-c-sharp)' headline? Like here:

```
namespace WebApplication2.Controllers {[Authorize]    public class HomeController : Controller {            public ActionResult Index() {            return View();        }         public ActionResult About() {            ViewBag.Message = "Your application description page.";             return View();        }         public ActionResult Contact() {            ViewBag.Message = "Your contact page.";             return View();        }    }}
```

or there is a shortcut for this? What if I want to change [rules](https://www.mindstick.com/articles/43901/blackjack-rules) for one and only action in particular [controller](https://www.mindstick.com/blog/273/passing-values-from-controller-to-view-in-asp-dot-net-mvc)?

## Replies

### Reply by Takeshi Okada

Simplest way is to add Authorize attribute in the filter config to apply it to every controller.

```
public class FilterConfig{    public static void RegisterGlobalFilters(GlobalFilterCollection filters)    {        filters.Add(new HandleErrorAttribute());         //Add this line        filters.Add(new AuthorizeAttribute());    }}
```

Don't forget to add AllowAnonymous attribute when you need it to be accessible to non-logged in users.


---

Original Source: https://www.mindstick.com/forum/12862/require-authorization-within-whole-asp-dot-net-mvc-application

Copyright © MindStick Software Pvt. Ltd. This Markdown version is provided for developers, AI systems, and offline reading.