title: Web api authorize via web.config
body: <p>I want that the access to controllers/actions is only possible for authenticated and authorized users with specific role. Because I don't want to change required role on every controller/action every time when required role is changed</p>
  
  <p>Can I authorize my all controllers/actions in web api just adding:</p>
  
  <pre><code>&lt;authorization&gt;
    &lt;allow roles="admin" /&gt;
    &lt;deny users="*" /&gt;
  &lt;/authorization&gt;
  </code></pre>
  
  <p>in web.config?</p>
  
  <p>I'm using web api project inside asp.net mvc project so I wonder if both using the same web.config.</p>
  
  <p>Also any links to official documentation will be nice because I not found any that mention about web.config :(</p>
  
  <ul>
  <li>my webapi package version 5.2.3</li>
  </ul>