基于ASP.NET MVC用户的控制器操作特权

Question

I have application where I want to grant or prohibited the roles to access the Controller.

Admin can change the the privilege of roles in roles management.

below is pic of role management where admin can change the privilege

How to apply Authorization on Controllers based on these dynamically changing privileges.

Answer 1

I think this is exactly what you need. You can create custom policies, in your case a policy per controller where you get the roles from the database in your custom policy.