how to handle permissions in ASP.NET Core?

Margaal

7y1.2k.NET

Hi. I am on an ASP.NET CORE MVC project in which I manage user accounts with Identity and where each user has a role ("Admin" and "User"). Now, I would like to put a permission system that will allow users of the "Admin" role to specify the user rights of the "User" role. For example, to forbid an account of the role "User" not to register the products, but to read them only.
I searched but I have no idea how to implement such a system. Can you help me with a tip or an idea?
Thank you

3 Replies

Know the answer? Post it — somebody with the same question will find it here.

Madan Shekar7y ago
Accepted answer
same logic you should rewrite in diferent way .
user table
userid, name , roleid
1 madan 1
role table
id name permision
1 admin read/write/view
2 user read
once users login in the sense based on his role id you will get permision in action method level or controller level u need to set your logic.
Margaal7y ago
Thank you for your reply Madan Sorab but currently I already use the "role based authorization" with "AuthorizeFilter". The problem is that the client would like the account "Admin" to be able to assign / modify permissions to accounts "User" without having to redeploy the application each time. Do you see now my problem? It is to find a solution to allow the account "Admin" to modify the permissions of the users without each time redeploy the application.
Madan Shekar7y ago
go through the bellow blog , there you have a solution

https://www.c-sharpcorner.com/article/role-base-authorization-in-asp-net-core-2-1/