title: ASP.NET MVC application that uses forms authentication
body: <p>I am going to take Microsoft 70-486 (MVC) exam. So i am preparing for it. Came across one most important question asking in 70-486 exam but does not satisfied with the answer they given.</p>
  
  <p><strong>The Question</strong></p>
  
  <p>You are developing an ASP.NET MVC application that uses forms authentication.
  The user database contains a user named <code>LibraryAdmin</code>. </p>
  
  <p>You have the following requirements: </p>
  
  <ul>
  <li>You must allow all users to access the <code>GetBook</code> method. </li>
  <li>You must restrict access to the <code>EditBook</code> method to the user named <code>LibraryAdmin</code>. </li>
  </ul>
  
  <p>You need to implement the controller to meet the requirements. </p>
  
  <p>Which code segment should you use? (Each correct answer presents a complete solution. Choose all that apply.)</p>
  
  <p><img src="https://i.stack.imgur.com/qlhEz.png" alt="enter image description here"></p>
  
  <p><img src="https://i.stack.imgur.com/JNoPp.jpg" alt="enter image description here"></p>
  
  <p><img src="https://i.stack.imgur.com/2xQ9c.jpg" alt="enter image description here"></p>
  
  <p>But According to question <strong>i must restrict restrict access to the EditBook method to the user named <code>LibraryAdmin</code></strong> Both Option A and C will allow acces to Edit Book. So i feel the answer is wrong. Then what is correct answer?</p>
  
  <p>ref: <a href="https://docs.google.com/file/d/0B88_6d1RUOE2WDkwTTZiYTBzOWs/edit" rel="nofollow noreferrer">From DOCUMENT</a></p>