public class AccessToModuleFilter : IActionFilter
	{
		private const string cookieName = "AccessibleMenus";

		public void OnActionExecuting(ActionExecutingContext filterContext)
		{
			var requestContext = filterContext.RequestContext;
			var cookie = requestContext.HttpContext.Request.Cookies[cookieName];
			if (cookie != null)
			{
				filterContext.Controller.ViewData[cookieName] = cookie.Value.Split(',').ToList();
				return;
			}

			AuthenticationProjectPrincipal raPrincipal = requestContext.HttpContext.User as AuthenticationProjectPrincipal;
			if (raPrincipal == null)
				return;

			IList<string> modules = GetAccessableModuleNames(raPrincipal.UserData.UserID);
			filterContext.Controller.ViewData[cookieName] = modules;

			cookie = new HttpCookie(cookieName, string.Join(",", modules.ToArray()))
			{
				Expires = DateTime.Now.AddMinutes(20)
			};
			requestContext.HttpContext.Response.Cookies.Add(cookie);
		}

		public void OnActionExecuted(ActionExecutedContext filterContext)
		{
		}


		private IList<string> GetAccessableModuleNames(int userId)
		{
			try
			{
				IList<string> modNames = new List<string>();
				foreach (var module in Enum.GetValues(typeof(Modules)))
				{
					if (this.HasUserAccessToModule(userId, Convert.ToByte(module)))
						modNames.Add(module.ToString());
				}

				return modNames;
			}

			catch (Exception e)
			{
				throw e;
			}
		}

		private bool HasUserAccessToModule(int userId, byte moduleId)
		{
			using (AuthenticationDemoEntities dbContext = new AuthenticationDemoEntities())
			{
				try
				{
					int functionId = Convert.ToInt32(Functions.Access);

					Users user = dbContext.Users
						.Include("AccessToModuleFunctions")
						.Include("Role")
						.Include("AccessToModuleFunctions.ModulesFunctions")
						.Include("AccessToModuleFunctions.ModulesFunctions.Module")
						.Include("AccessToModuleFunctions.ModulesFunctions.Function")
						.FirstOrDefault(usr => usr.ID == userId);

					if (user == null)
						return false;

					AccessToModuleFunctions userFunc = user.AccessToModuleFunctions
					 .SingleOrDefault(modFunc => modFunc.ModulesFunctions.Function.ID == functionId
						 && modFunc.ModulesFunctions.Module.ID == moduleId);
					if (userFunc == null)
					{
						if (user.Role == null)
							return false;

						userFunc = GetAccessByRoleModuleFunciton(user.Role.ID, moduleId, (long)Functions.Access);
						if (userFunc == null)
							return false;
					}

					return userFunc.HasAccess ?? false;
				}
				catch (Exception e)
				{
					throw e;
				}
			}
		}

		private AccessToModuleFunctions GetAccessByRoleModuleFunciton(int roleId, byte moduleId, long functionId)
		{
			using (AuthenticationDemoEntities dbContext = new AuthenticationDemoEntities())
			{
				try
				{
					return dbContext.AccessToModuleFunctions
						.FirstOrDefault(urmf => urmf.Role.ID == roleId && urmf.ModulesFunctions.Module.ID == moduleId
							&& urmf.ModulesFunctions.Function.ID == functionId);
				}
				catch (Exception ex)
				{
					throw ex;
				}
			}
		}

	}

		[HttpPost]
		[AllowAnonymous]
		[ValidateAntiForgeryToken]
		public ActionResult Login(LoginModel model, string returnUrl)
		{
			if (ModelState.IsValid && WebSecurity.Login(model.UserName, model.Password, persistCookie: model.RememberMe))
			{
				return RedirectToLocal(returnUrl);
			}

			// If we got this far, something failed, redisplay form
			ModelState.AddModelError("", "The user name or password provided is incorrect.");
			return View(model);
		}

public MyController: Controller {
   
    public MyController(ISecurityService securityService)
    {
        _securityService = securityService;
    }

}