In my Controller before a Model is modified (*updated or deleted*) I am trying to verify that the User performing the action actually owns the object they are trying to modify. 

I am currently doing this at the method level and it seems a bit redundant.

```
[HttpPost]
public ActionResult Edit(Notebook notebook)
{
    if (notebook.UserProfileId != WebSecurity.CurrentUserId) { return HttpNotFound(); }

    if (ModelState.IsValid)
    {
        db.Entry(notebook).State = EntityState.Modified;
        db.SaveChanges();
        return RedirectToAction("Index");
    }
    return View(notebook);
}

```

Is there a generic way of doing this that could be reusable across various models?

Is it possible to do this with an `ActionFilter`?