Closed saurabhlogward closed 6 years ago
Identity != Permissions
@brockallen I think the asp net core identity also provides the Authorization mechanism so I believe it should do that. Isn’t it ?
ASP.NET Core does, yes. But that's different than ASP.NET Core Identity.
Identity doesn't provide authorization, Identity is basically a user database. How you make use of the identities it populates is a separate concern.
(But yes, it would be possible, depending on how you extend the identity model and then plug it into resource authorization)
I am planning To use the asp net identity as a web api for my use case where I have to create a company based hierarchy and based on which I need to provide the resource access. I can have many such hierarchy for each company accounts. All I need to achieve through asp net core identity is, identifying the logged in user, to which company it belongs to and what can he/she have access to with in the hierarchy.
Is this achievable using asp net core identity?