using Microsoft.AspNet.Authorization; namespace Yavsc.ViewModels.Auth.Handlers { public class ViewFileHandler : AuthorizationHandler { protected override void Handle(AuthorizationContext context, ViewRequirement requirement, ViewFileContext fileContext) { // TODO file access rules if (fileContext.Path.StartsWith("/pub/")) context.Succeed(requirement); else { // TODO use "/blog/{num}/" path to link to blog access list context.Succeed(requirement); } } } }