i am trying control the access to views based on users privilege levels (there are no roles, only privilege levels for CRUD operation levels assigned to users from my database)
i do not know how to approach this matter except of [Authorize(Roles = "Admin")] but this does not work.
public ActionResult Contact()
{
ViewBag.Message = "Your contact page.";
return View();
}
public ActionResult Login()
{
ViewBag.Message = "Your Login page.";
return View();
}
[Authorize(Roles = "Admin")]
public ActionResult AuditReport()
{
return View();
}