Hello I'm having an issue with adding authentication to my UmbracoApiController for frontend member authentication, and I hope someone in here has any insight into this Running Umbraco 6.1.4, I have a membergroup whom should be the only ones able to access APImethods. Following (as far as I can tell http://our.umbraco.org/documentation/Reference/WebApi/authorization I setup of controller methods are as shown below

public class CompanyApiController : UmbracoApiController
{
    [HttpPost]
    [Umbraco.Web.WebApi.MemberAuthorize(AllowGroup = "MemberGroupName")]
    public HttpResponseMessage MethodName(SearchModel model)
    {
        //DO stuff
    }
}

My problem is this: Setting AllowGroup and attempting to access the method as a member not part of that group will still fire the method and return as if authenticated. Using AllowedMembers or AllowedType works fine and denies unauthorized requests but this solution uses MemberGroups/MembershipRoles so using AllowedType is not an option.

Thanks in advance, Anders