如何将一个控制器的方法授权给一个角色或多个角色，而不会取消整个控制器。

我正试图通过角色限制访问我的控制器的方法，以传统的方式，完整的控制器拒绝了所有角色的用户的身份验证

这是一个带有多个角色的授权属性

using MBC.ServiciosUtilidad.CatalogoUS.Implementacion;
using MBC.ServiciosEntidad.ReportesDmsES.Implementacion;
using System.Web.Mvc;
using MBC.Models.ReportDms;
using PagedList;
using System.Data;
using System.Linq;
using MBC.ModeloCanonico.Constantes;
using System.Web.Security;
using static MBC.ModeloCanonico.Constantes.CatalogoConstante;
namespace MBC.Controllers.Report.Vehiculos
{
    [Authorize]
    //[Authorize(Roles = CatalogoConstante.Rol.Administrador)]
    public class ReportDmsVehiculosController : MasterController
    {
        private readonly ICatalogoUSContract _servicioCatalogo;
        private readonly IReportesDmsESContrato _servicioReportesDms;
        
        //构造函数
        public ReportDmsVehiculosController()
        {
            _servicioCatalogo = new CatalogoUSImplementacion();
            _servicioReportesDms = new ReportesDmsESImplementacion();
        }
        
        //[Authorize(Roles = CatalogoConstante.Rol.Administrador)] 
        [AuthorizeRoles(Rol.Administrador)]
        public ActionResult ReportDmsVehiculos()
        {
            return View();
        }
    }
}
namespace MBC.ModeloCanonico.Constantes
{
    public static class CatalogoConstante
    {
        public struct Rol
        {
            public const string Administrador = "Administrador";
            public const string RecursosHumanos = "Recursos Humanos";
        }
    }
}

这是一个带有返回消息“访问被拒绝”的登录()

public ActionResult Login()
{
    //if (User.Identity.IsAuthenticated)
    if (User.IsInRole("ProvideASpecificRoleHere"))
        return RedirectToAction("Index", "Home");
    if (User.Identity.IsAuthenticated)
        ModelState.AddModelError("", "访问被拒绝。");
    return View();
}

由于某种原因，它一直把我送到：RedirectToAction("Index", "Home")，这只应该在开始时发生

[HttpPost]
public ActionResult Login(LoginModel model)
{
    if (User.Identity.IsAuthenticated)
    {
        return RedirectToAction("Index", "Home");
    }
    UserRol userRol = new UserRol();
    userRol.user = _serviceUsuario.ValidarCredencialesRol(model.Usuario, model.Contrasena);
    if (userRol.user != null)
    {
        model.Roles = userRol.user.Roles;
        FormsAuthentication.SetAuthCookie(model.Usuario, false);
        ((ClaimsIdentity)HttpContext.User.Identity).AddClaim(new Claim(ClaimTypes.Role, model.Roles));
        var authTicket = new FormsAuthenticationTicket(1, model.Usuario, DateTime.Now, DateTime.Now.AddMinutes(20), false, model.Roles);
        string encryptedTicket = FormsAuthentication.Encrypt(authTicket);
        var authCookie = new HttpCookie(FormsAuthentication.FormsCookieName, encryptedTicket);
        HttpContext.Response.Cookies.Add(authCookie);
        return RedirectToAction("Index", "Home");
    }
    else
    {
        ModelState.AddModelError("", "无效的登录尝试。");
        return View(model);
    }
}
protected override void OnActionExecuted(ActionExecutedContext filterContext)
{
    base.OnActionExecuted(filterContext);
    UsuarioLogueado();
}

这是已注册用户的验证功能。这个类用于获取登录用户的信息，用于审计和在视图中显示一些数据。

protected void UsuarioLogueado()
{
    try
    {
        if (User.Identity.IsAuthenticated)
        {                   
            var usuarioLogueado = Session["UsarioEntityModel"] as UsarioEntityModel;
            if (usuarioLogueado == null)
            {
                usuarioLogueado = _userService.ObtenerUsuarioLogueado(User.Identity.Name).ToUsarioEntityModel();
                ((ClaimsIdentity)HttpContext.User.Identity).AddClaim(new Claim(ClaimTypes.Role, usuarioLogueado.Rol));
                Session["UsarioEntityModel"] = usuarioLogueado;
            }
            ViewBag.usuarioLogueado = usuarioLogueado;
        }
        else
        {
            Session["UsarioEntityModel"] = null;
        }
    }
    catch (AggregateException ex)
    {
        throw ex;
    }
}