I d like to authorize users to perform specific actions within my controllers. I ve found the ASP.NET tutorial which explains how to allow individual users to perform specific actions but can this be extended to security groups? For example, would everyone belonging to the "domaingroup" security group have access to the GetSecrets action if the code looked like this:
[Authorize(Users="domaingroup")]
public ActionResult GetSecrets()
{ return View(); }
If not, how would I do this?