I know it is possible to decorate a controller with the Authorize attribute to control access, what I don\'t know is the accepted or proper way to enforce security across al
you can always use deny or allow
deny or allow