500 (Internal Server Error) when defining action as [Childactiononly]

Question

500 (Internal Server Error) when defining action as [Childactiononly]

Asked 7 years, 5 months ago

Viewed 240 times

0

I want to block partialview url through url using [ChildActionOnly].

Face problem, follow code:

HTML:

<li style="cursor:pointer"><a id="button_id">Criar</a></li>

JS:

$("#button_id").click(function () {
    $("#conteudoModal").load("@Url.Action("MinhaAcao", "Controller")", function () {
        $('#minhaModal').modal('show');
    });
});

Controller:

[HttpGet]
[ChildActionOnly] // <----- Aqui
public ActionResult MinhaAcao()
{
    var model = new Model();


    return PartialView(model);
}

Without [ChildActionOnly] modal opens normal and with partialview url.

With [ChildActionOnly], by clicking on "Create" button, I get error message:

Exception Details: System.Invalidoperationexception: The Action 'Minhaacao' is accessible only for a daughter request.

Some solution ?

What is the error message?

– Jéf Bueno

2017/06/19 at 14:07
1

@LINQ Error 500 as far as I understand.

– Aline

2017/06/19 at 14:26
1

@Aline 500 That code says absolutely nothing. It is only a number that identifies the type of the HTTP response, where semantically it means there was an error on the server side. ASP.NET applications usually return a 500 response when an exception occurs, if an exception occurs there is a message and a stacktrace.

– Jéf Bueno

2017/06/19 at 14:28
1

@LINQ, relax. If I have any route problem or permission, will return error 500 and no other information. That’s what I understand is happening to him. If you know how to provide more detailed information when it is not on the console, please reply, because I also want to know. = T

– Aline

2017/06/19 at 14:50
1

@Aline did not understand the "relax". About the error message: you are mistaken, of course this will not happen. Error 500 will always return a page with the information that originated the exception. If the call is made via Javascript it is possible to see the page in the tab network of browser.

– Jéf Bueno

2017/06/19 at 14:56
@LINQ, it’s true. You’re right. The page appears and everything else. And the relaxation was just force of expression.

– Aline

2017/06/19 at 15:04

Show 1 more comment

1 answer

Browser other questions tagged javascript c# asp.net-mvc-5

You are not signed in. Login or sign up in order to post.

by Jéf Bueno • **67,331** points · Answer 1 · 2017-06-19T15:36:48+00:00

It turns out that actions marked with the attribute [ChildActionOnly] can only be called as a "child" method from within a view, using the extension methods Html.Action() or Html.RenderAction().

The method load, probably makes a GET request to the server, via Xmlhttprequest. That is, you are trying to make the call from action just the way you’re trying to block using this attribute.

The only output is to remove this attribute.

If you want to block the user from seeing the content of partial view by the browser, you can make a request on server-side using Request.IsAjaxRequest().

Something like:

[HttpGet]
public ActionResult MinhaAcao()
{
    if(!Request.IsAjaxRequest())
        return HttpNotFound();   

    return PartialView();
}