Using Claims for Roles in ASP.NET Identity 2

Question

I'm new in asp.net identity and perhaps don't understand concepts.

In my previous applications we have been able to create new roles and attach to roles objects which we called “Action”. Every action meant something what user who has a specific role can make. For instance, we created new role Role=Reader and Action=ReadNews. We set for user Mike what he in role Reader and then Mike could read news.

In new application we decided to use new authorization model from Asp.Net Identity 2 with Claims and escape from our actions. But in asp.net identity we don't attach claim (analog of our action) to roles easy. May be we need to think differently and use claims with another way?

Answer 1

I suggest to look at authorization policies from Asp.Net 5: Claims Transformation and Authorization Policy in ASP.NET 5 (vNext)/MVC 6 .

This will allow you to configure behavior based on roles. Implementation is opensource and I think it is possibel to port/implement it to curent framework. This will also help to migrate to new bits later.