Check if user has permission to access a url (for use with logon return url)

Question

Hi,

When a user logs on, I check if there is a return url, and if so I redirect to it, as per the MVC application template.

if (!String.IsNullOrEmpty(returnUrl))
{          
    return Redirect(returnUrl);
}

How would I check if this URL was valid (routes to a controller/action), and the user has permission to access it? My actions are all protected using the standard authorize attribute.

Thanks for your help,

Stew

Answer 1

You would normally protect a specific URL via the web.config file not inside your code. See this article.