所有操作都应使用属性[授权]进行修饰，或者您可以在全局级别进行操作。



谷歌[授权]在全球MVC你会找到足够的信息

All actions should be decorated with attribute [Authorize] or you could do it global level.

Google [Authorize] at global in MVC you will find enough information