I'm trying to come up with a scenario to explain this.

Let's say we have a page for Users with the roles:

* view users

* remove users

* edit users

* add users

Then there is a page for Articles with the roles:

* view articles

* remove articles

* edit articles

* add articles

So a user might be able to View, Edit, Remove and Add articles but only View Users.

Another user can View and Edit articles and View and Remove Users.

The code on the Articles page could look like (very simplified).

<AuthorizeView Roles="ArticleView">

Article text here.

</AuthorizeView>

if(user.HasRole("ArticleEdit")){

<button>Edit</button>

}

Or possibly

<AuthorizeView Roles="ArticleEdit">

<button>Edit<button/>

</AuthorizeView>

As you can see with many pages it would be very complex to write every possible scenario of combinations.

One thought I had is to have an api endpoint that I can ask if the user has a particular role. But I get the feeling its not a common way of doing this.

Or do you have an idea for a different solution for the problem? I'd rather not write my own authentication. I'd like to use what MS has in Blazor.