u/Tigertopin r/dotnet • Recommends
A practical look at security and identity in ASP.NET Core and Entity Framework Core - Jon P Smith - NDC Oslo 2019
0:00 / 0:00
#asp.netcore#entityframeworkcore#authorization
A practical look at security and identity in ASP.NET Core and Entity Framework Core - Jon P Smith
NDC Conferences
230K subscribers • 110 videos on Hallway • Conference channel
- Recommended by 2 people: 2 in engineering communities.
- Presented by Jon P Smith
- May be out of date. Uploaded 7 years ago, in an area where tools change fast.
Intermediate. Assumes working knowledge.
17K views7 years ago2 recommendations
SecurityWeb developmentWeb and application securityHTTP, REST and GraphQL
Jon P Smith explains how to design feature-level and data-level authorization for a complex multi-tenant ASP.NET Core application.
This is a talk about what happened when a client asked me to build a big, multi-tenant web application, and they said “we have quite a complex set of rules on what our user can do”. That turned into quite a journey. In this session I will take you through the design we used to get ASP.NET Core and Entity Framework Core to provide both feature-level authorization (e.g. controlling what Web APIs/pages the user can access) and data-level authorization (i.e. controlling what data they can see). Check out more of our talks in the following links! NDC Conferences ndcoslo.com ndcconferences.comWhy it's here
2 people recommend thisWhat people say. Recommended for its practical approach to hierarchical and multi-tenant authorization in .NET.
Moments people linked to
u/VatistaScrubin r/dotnet • Recommends
On “Casbin.NET: An authorization library that supports access control models like ACL, RBAC, ABAC in .NET (C#)”
This isn't directly applicable but [video is kind of in the same ballpark in that it's hierarchical, maybe it will give you some ideas.