Asp.net MVC2 does redirect to login page with response 302 when authenticated user has no rights.
response 302
I would like to split into two actions
As suggested in Customizing authorization in ASP.NET MVC, you could subclass the AuthorizeAttribute to intercept the authenticated-but-unauthorized scenario and replace the result with a redirect.