title: Correct way to authorize an ASMX .NET web service from MVC 4 Project
body: <p>I have an <em>ASP.NET MVC</em> application that has a .asmx web service</p>
  
  <p>I wrote an action filter attribute that I wanted to use on web methods on the web service, to check the Request headers for a UserID and Password, and throw an unauthorized response code if invalid or not present.</p>
  
  <p>However, they dont appear to get called! Breakpoints just dont get hit.</p>
  
  <p>Firstly, is using <em>MVC</em> attributes an acceptable way of authorizing web service called on an <em>ASMX</em> web service?</p>
  
  <p>Secondly, is there a better/more efficient way of authorizing web service method calls?</p>