Authorization inside controller

Question

User-81839486 posted

Hey, I want to create system were if user is Admin then on page are shown every row from database, otherwise only related to current user. I need sth like this 

if ((await AuthorizationService.AuthorizeAsync(User, "UserIsAdmin")).Succeeded)
{
select * from database and show
}else{

select * from database where UserId = currentUser

}

but Authorizationservice.Authorize async can only be used in async method. Can I do sth similiar with sync method?

Answer 1

User-474980206 posted

first in asp.net core you should always use the async methods if available especially database queries or network access. All controller methods support async.

Second read the docs on authorization. You should be using a role or claim for the administrator. 

https://docs.microsoft.com/en-us/aspnet/core/security/authorization/introduction?view=aspnetcore-3.1

Answer 2

User-682152325 posted

good job sir