扩展AuthorizeAttribute

[AttributeUsage(AttributeTargets.Class|AttributeTargets.Method,Inherited=true,AllowMultiple=true)]
    public sealed class SecurityAuthorizationAttribute :AuthorizeAttribute
    {
        protected override bool AuthorizeCore(HttpContextBase httpContext)
        {
            if (httpContext == null)
            {
                throw new ArgumentException("httpContext");
            }
            bool result = true;
　　　　　　　　// 权限设置
            return result;
        }
//return true 是不会触发 handleUnauthorizedRequest.

        protected override void HandleUnauthorizedRequest(AuthorizationContext filterContext)
        {
            //base.HandleUnauthorizedRequest(filterContext);
            filterContext.Result = new ViewResult
            {
                ViewName = "~/Views/Shared/Error.cshtml",
                ViewData = new ViewDataDictionary() { { "ErrorMessage", Constants.IsAccessDenied } }
            };
        }
    }

//没有权限时候跳转到的error页面。