protected void Application_BeginRequest(Object sender,EventArgs e)
{
   HttpContext.Current.User = HttpContext.Session["CurrentUser"];
}

或者您可以使用继承到控制器的System.Web.Mvc.Controller的“User”属性(注意：确保在成功验证用户登录时调用FormsAuthentication.SetAuthCookie方法).