3 ms·
Attribute/Claims based access control seem to be the most recommended these days. Legacy apps will tend to stick with the role based approach.
by opmac 11y ago
Attribute/Claims based access control seem to be the most recommended these days. Legacy apps will tend to stick with the role based approach.
- keth 11y agoDo you know of more involved examples that use claim based authorization? So far I have only seen simple use cases that at most involve if a user works for a certain company, or that a user can only delete his own postings (userID == authorID), which I can easily handle with permissions. But I have not seen slightly more complex ones yet like the example in the OP or really complex ones. But will definetly look into it, the .net implementation seems fairly easy to understand (after skimming through some files).