Backend Authorization

Creating Authorized Controllers

Controllers by default are open and can be accessed by anyone, without logging in.

To limit access to controllers, apply the Authorize attribute to your controller class declarations - refer to this section of the ASP.NET documentation for details.

Note that the Role name(s) you specify with this attribute must match the "Value" property of the Role in question - do not confuse this with the "Display Name", which is just a label.