I have some partial views in my controller. The problem is that users can visualize my partial views if they put in url: (www.mydomain.com/mycontroller/mypartialview). How can I deny direct access... and allow work with partial views only from base view?
Thank's!
add [ChildActionOnly] .. like this :
[ChildActionOnly]
public PartialViewResult List(Model model)
{...
return PartialView(model);
}
As Andras says, this would only happen if you have a controller action to return them. I can see that you might have those in place in which case you should add the attribute (filter them) as [ChildActionOnly]