title: WEB API - Authorize at controller or action level (no authentication)
body: <p>I have an existing API that has No Authentication. It`s a public Web API which several clients use by making simple requests.</p>
  
  <p>Now, there is the need to authorize access to a certain method.</p>
  
  <p>Is there any way to do this, keeping the rest of the controllers and respective methods "open" for the clients that already use this Web API?</p>
  
  <p>How can i identify if the request has permissions to access this "protected" method?</p>