title: Asp.net Web Api controller action authorize by web config settings
body: <p>I have a controller action and I want to use changeable authorization via web config settings.</p>
  
  <pre><code>public class ProductsController : ApiController
  {
      [HttpGet, Authorize]
      public Product FindProduct(id) {}
  }   
  
  &lt;appSettings&gt;
    &lt;add key="authorize" value="yes"/&gt;
  &lt;/appSettings&gt;
  </code></pre>