protected override bool AuthorizeCore(HttpContextBase httpContext)
{
    var routeData = httpContext.Request.RequestContext.RouteData;
    var controller = routeData.GetrequiredString("controller");
    var action = routeData.GetrequiredString("action");
    ...
}