如何在ASP.NET Core中设置可编辑的角色？

Question

I want to make Role-based authorization using ASP.NET Core, but roles need to be editable. My idea is to make roles like this:

• name
• canEdit
• canDelete
• etc.

And the user would have assigned role.

Default roles are not an option, because I need to edit those roles. I'm thinking about some weird using of Policies or writing my own authorization.

[Authorize(Roles = "Administrator")] // Not editable

I have to tell, that I'm not using Identity and for authentication I have JWT.

---

...
[Authorize(Policy = "CanEdit")]
SomeEditMethod()
...

---

public void ConfigureServices(IServiceCollection services)
{
    services.AddMvc();

    services.AddAuthorization(options =>
    {
        options.AddPolicy("CanEdit", policy => policy.RequirePrivilege("CanEdit"));
    });
}

I can be hard to make RequirePrivilege . What do you think fellows developers? Any ideas?

Answer 1

Ok, so...

I did it by saving this in JWT, and then adding policies like this.

  ...
  services.AddAuthorization(options => {
     options.AddPolicy("CanEditUnit", policy => policy.RequireClaim("CanEditUnit", "True"));
  });
  ...

And them using Authorize attribute. For example:

[Authorize(Policy = "CanEditUnit")

Thanks everyone for help! Especially @Briefkasten.