Authorization in .net

malathi puttaiah

Want to do .net core based web project for educational Institution. Each staff should be able to create, update his record. Staff details maintained in multiple tables. Admin can approve, reject records. Staff should be able to view other colleagues records. I want to implement

authorization along with authentication for this case study.

Department(1:*

with Staff)

DeptId

StartDt

Image

Hod

Staff

StaffId

DeptId

JoinDT

Image

Personal(1:1 with

Staff)

StaffId

BirthDt

Marital

Address

Project(*:1 with Staff)

StaffId

Title

Url

Duration

2 Replies

Know the answer? Post it — somebody with the same question will find it here.

malathi puttaiah8y ago
What about .net Identity table/class? . I am getting confused with Claims, Principal, Handlers etc of .net core2..0. I want to implement a live project so have to take care of
authentication & authorization details.
Sagar Rane8y ago
Login Detail        StaffDetail              PersonalDetail
LoginId(PK)        StaffID(PK)             PersonalID(PK)
Username         PersonalID(FK)      Name
Password           DepartID(FK)          Address
IsActive            Location Contact
StaffID(FK)        JoinDT                    DOB
                          RightsID(FK)           Marital

Login Detail table to maintain Authentication of an user

RightsDetails // Rights Master to maintain Authorization
RightsID(PK)
RightsName{ALL,Read,Write,Delete,None}
Description
Isactive

By using rightDetails table .. every user has sepcific right let say read so the user can only read records.

Assign Admin a 'write' or 'All' rights to monitor or perform certain task on records.