A critical vulnerability was discovered in React Server Components (Next.js). Our systems remain protected but we advise to update packages to newest version. Learn More. 

AI OnAI Off

[Authorize] and [AllowAnonymous]-attributes

Saasen
Saasen
Vote:
 

Hi.

 

I'm trying to use the [Authorize] and [AllowAnonymous] attributes in my EPiServer site.

All, of my controllers are marked with the [Authorize] attribute, except of one. This one is marked with the [AllowAnonymous] attribute. When I'm trying to access this controller without authenticating, I still get redirected to the login-screen.

This is (a part of) my code:

[AllowAnonymous]
    public ActionResult Index(StartPage currentPage)    

Any obvious mistakes?

// Anders

#82777
Mar 19, 2014 14:59
valdis
valdis
Vote:
 

What are SecurityAccess rights for the site (available under CMS -> Admin -> Admin -> Config -> Access Rights)?

#82791
Mar 19, 2014 22:16
Saasen
Saasen
Vote:
 

Everyone has read access to Root and all underlying pages.

#82797
Edited, Mar 20, 2014 7:44
Saasen
Saasen
Vote:
 

Nvm, I was retarded. Total brainfart.

#82826
Mar 20, 2014 9:57
valdis
valdis
Vote:
 

mkey :) What was the issue?

#82828
Mar 20, 2014 10:04
valdis
valdis
Vote:
 

mkey :) What was the issue?

#82829
Mar 20, 2014 10:04
Saasen
Saasen
Vote:
 

I inherited from ASP.NET MVC's controller instead of the EPi controller.

ExploreActivitiesPage : Controller

Instead of:

ExploreActivitiesPage : SitePageData

Inheriting from the correct controller fixed the problem.

#82830
Mar 20, 2014 10:06
* You are NOT allowed to include any hyperlinks in the post because your account hasn't associated to your company. User profile should be updated.