Authorize roles

Marius Vasile

I just want to know if I have in startup

options.AddPolicy("PTW", policy => policy.RequireRole("Management", "Safety", "PTWIssuer", "PTWReceiver", "PTWIsoCert"));

is similar with having in View

[Authorize(Policy = "PTW")]
[Authorize(Roles = "Management,Safety,PTWIssuer,PTWReceiver,PTWIsoCert")]

so it's enough only in startup and in view to keep only first line?

4 Replies

Know the answer? Post it — somebody with the same question will find it here.

Sachin Singh5y ago
Accepted answer
if line 01 is necessary
services.AddAuthorization(options =>
{
options.AddPolicy("PTW", policy => policy.RequireAssertion(context =>
(context.User.IsInRole("Management") || context.User.IsInRole("Safety") || context.User.IsInRole("PTWISSUER") ||context.User.IsInRole("PTWISOCERT") context.User.IsInRole("PTWRECEIVER")) && policy.Requirements.Add(new AccessCodeRequirement("PTW"));

));
});
Sachin Singh5y ago
use this
services.AddAuthorization(options =>
{
    options.AddPolicy("PTW", policy => policy.RequireAssertion(context =>
        context.User.IsInRole("Management") ||   context.User.IsInRole("Safety") ||  context.User.IsInRole("PTWISSUER") ||context.User.IsInRole("PTWISOCERT")   context.User.IsInRole("PTWRECEIVER")

    ));
});
Marius Vasile5y ago
Thank you Sachin. Now I have another problem. I have a policy rule as below
options.AddPolicy("PTW", policy => policy.Requirements.Add(new AccessCodeRequirement("PTW")));
How do I add the roles to the rule? If I write both it's not working, like
options.AddPolicy("PTW", policy => policy.Requirements.Add(new AccessCodeRequirement("PTW")));

options.AddPolicy("PTW", policy => policy.RequireRole("Management", "Safety", "PTWIssuer", "PTWReceiver", "PTWIsoCert"));
Sachin Singh5y ago
Yes, just use policy. Policy means group of multiple attributes while role is just a single attribute, for autherizing someone.