protected override bool AuthorizeCore(HttpContextBase httpContext) { Contract.Assert(httpContext != null); return base.AuthorizeCore(httpContext) && this.HasPermissions(httpContext.User); }