asp.net mvc - Can the [Authorize] attribute be set globally for all controllers?

Question

Currently one puts the [Authorize] on the controller class or specific action. Is it possible to setup the [Authorize] attribute centrally for all controllers, say to prevent nonauthenticated use. Then after that one could define more specific [Authorize] attributes on specific controller such as

[Authorize(Roles="Admin, SuperUser")]

Thanks.

Answer 1

This should work (put in Application_Start):

GlobalFilters.Filters.Add(new AuthorizeAttribute() { Roles = "Admin, SuperUser" });