1

When I put the Role [Authorize Roles (Role.Administrator, Role.Assistant)], is an OR or AND or you can not do this?

Taisbevalle
  • 246
  • 1
  • 9
  • 19

1 Answers1

1

When you put an [Authorize]attribute on a controller or action you are saying the user must be in one of those roles.

Think of it more like 'Authorize using this controller or action if this user is in roleA or roleB'

Ju66ernaut
  • 2,592
  • 3
  • 23
  • 36