Authorize roles

Question

I just want to know if I have in startup

options.AddPolicy("PTW", policy => policy.RequireRole("Management", "Safety", "PTWIssuer", "PTWReceiver", "PTWIsoCert"));

is similar with having in View

[Authorize(Policy = "PTW")]
[Authorize(Roles = "Management,Safety,PTWIssuer,PTWReceiver,PTWIsoCert")]

so it's enough only in startup and in view to keep only first line?

Sachin Singh · Answer

if line 01 is necessary services.AddAuthorization(options => { options.AddPolicy( "PTW" , policy => policy.RequireAssertion(context => (context.User.IsInRole( "Management" ) || context.User.IsInRole( "Safety" ) || context.User.IsInRole( "PTWISSUER" ) ||context.User.IsInRole( "PTWISOCERT" ) context.User.IsInRole( "PTWRECEIVER" )) && policy.Requirements.Add( new AccessCodeRequirement( "PTW" )); )); });

Sachin Singh · Answer

use this services.AddAuthorization(options => { options.AddPolicy( "PTW" , policy => policy.RequireAssertion(context => context.User.IsInRole( "Management" ) || context.User.IsInRole( "Safety" ) || context.User.IsInRole( "PTWISSUER" ) ||context.User.IsInRole( "PTWISOCERT" ) context.User.IsInRole( "PTWRECEIVER" ) )); });

Sachin Singh · Answer

Yes, just use policy. Policy means group of multiple attributes while role is just a single attribute, for autherizing someone.

Marius Vasile · Answer

Thank you Sachin. Now I have another problem. I have a policy rule as below options.AddPolicy( "PTW" , policy => policy.Requirements.Add( new AccessCodeRequirement( "PTW" ))); How do I add the roles to the rule? If I write both it's not working, like options.AddPolicy( "PTW" , policy => policy.Requirements.Add( new AccessCodeRequirement( "PTW" ))); options.AddPolicy( "PTW" , policy => policy.RequireRole( "Management" , "Safety" , "PTWIssuer" , "PTWReceiver" , "PTWIsoCert" ));