What do I need to put in the role-based authorization code in ASP.NET Core?

Question

ASP.NET

Hello, I am doing a project and I need to make sure that only read-only mode is available to non-authenticated users (search is available, company creation is not available, comments, likes and ratings are not available) and Authenticated users have access to everything except the admin panel. I want to do this with role-based authorization in ASP.NET Core - https://docs.microsoft.com/en-us/aspnet/core/secur... . But I don't know what to write inside.

using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;

namespace MyWebSite.Models
{
    [Authorize(Roles = "User")]
    public class UserController : Controller
    {
        // что здесь писать?
    }
}

using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;

namespace MyWebSite.Models
{
    [Authorize(Roles = "Administrator")]
    public class AdministratorController : Controller
    {
        // что здесь писать?
    }
}

using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;

namespace MyWebSite.Models
{
    [Authorize]
    public class VisitorsController : Controller
    {
        public ActionResult SetTime()
        {
             // что здесь писать?
        }

        [AllowAnonymous]
        public ActionResult Login()
        {
             // что здесь писать?
        }
    }
}

Here's a Git link just in case - https://github.com/Parsifal31017/MyWebSite.git
Thanks in advance.

Answer 1

write your own business logic. You have already "explained" to aspnet that only users with a specific role can access these methods.

Answer 2

Hoch.
https://docs.microsoft.com/ru-ru/aspnet/web-api/ov...
https://identityserver4.readthedocs.io/en/latest/
However, I recommend using AZURE AD, it's fast and not very stressful

Answer 3

if (!User.IsInRole("User")) { return; }
but in fact, you have here:
[Authorize(Roles = "User")]
there is already a cutoff by role.