In MVC we can simply mark actions or controllers that require authentication with [Authorize]. What is the best practice for a traditional ASP.NET application where some pages require and some do not require authentication? Do I use two master pages where the one that needs authentication checks for HttpContext.Current.User?
Thanks.
...
Go to the complete details ...