public class HasPermissionAttribute : ActionFilterAttribute
{
    private string _permission;

    public HasPermissionAttribute(string permission)
    {
        this._permission = permission;
    }
    public override void OnActionExecuting(ActionExecutingContext filterContext)
    {
        var userRepo = DependencyResolver.Current.GetService<IUserRepository>();

        var userName = filterContext.RequestContext.HttpContext.User.Identity.Name;
        if (!userRepo.UserHasPermission(userName, _permission))
        {
            ////    // If this user does not have the required permission then redirect
            ////    var url = new UrlHelper(filterContext.RequestContext);
            ////    var loginUrl = url.Content("/Account/Login");
            ////    filterContext.HttpContext.Response.Redirect(loginUrl, true);
        }
    }
}

[HasPermission(PermissionConstant.AdminView)]
    public ActionResult Index()
    {
        return View();
    }