ASP.NET MVC Custom Authorization

Question

I have a question about custom authorization in MVC.

I have a site that I want to limit access to certain pages, depending on their group membership. Now I have see

Answer 1

If the authorization is really that dynamic, I would handle it in the controller. I have one action where I do this - you can return a HttpUnauthorizedResult to redirect to the login page or you can show a custom error in your view.

I don't the default redirect to the login page when somebody is already logged in, but not in the correct role. That's very confusing for the user.