[quote user="joaoluizbt"][AcceptVerbs(HttpVerbs.Post), Authorize][/quote] see How to secure applications using authentication and authorization from the NerdDinner tutorial. Your above code only says that users MUST be authenticated to access this controller, if you wanted only certan users...