[Solved] IsPostedFromThisSite attribute removing menu node

[Michael]

Hi

I am ussing the Menu control.

I have an attribute called [IsPostedFromThisSite]

[HttpGet]
public ActionResult Index()
{
	return View();
}
 
[HttpPost]
[ValidateAntiForgeryToken]
[IsPostedFromThisSite]
public ActionResult Index(LogOnModel model)
{
}

Here is my attribute code

	public class IsPostedFromThisSiteAttribute : AuthorizeAttribute
	{
		public override void OnAuthorization(AuthorizationContext filterContext)
		{
			if (filterContext.HttpContext != null)
			{
				if (filterContext.HttpContext.Request.UrlReferrer == null)
					throw new System.Web.HttpException("Invalid submission");
 
				if (filterContext.HttpContext.Request.UrlReferrer.Host != GlobalSettings.SiteHost)
					throw new System.Web.HttpException("This form wasn't submitted from this site!");
			}
			base.OnAuthorization(filterContext);
		}
	}

This attribute makes the Telerik menu not show the Index action at all. Any ideas how this can be fixed?

[Georgi Krustev]

Hello Michael,

 
I believe the issue is related with the added support for global authorization attributes. Check this forum thread for more information. If you have any issues, I will ask you to send us a simple test project in order to review it locally and advice you further.

Regards,
Georgi Krustev
the Telerik team

[Michael]

Thank you! That worked. Here is my complete extension now if anyone else runs into this problem.

public class IsPostedFromThisSiteAttribute : AuthorizeAttribute
{
	public override void OnAuthorization(AuthorizationContext filterContext)
	{
		if (filterContext.HttpContext != null)
		{
			if (filterContext.HttpContext.Request.UrlReferrer == null)
				throw new System.Web.HttpException("Invalid submission");
 
			if (filterContext.HttpContext.Request.UrlReferrer.Host != GlobalSettings.SiteHost)
				throw new System.Web.HttpException("This form wasn't submitted from this site!");
		}
		base.OnAuthorization(filterContext);
	}
 
	protected override bool AuthorizeCore(HttpContextBase httpContext)
	{
		return true;
	}
}