125 questions for “Authorization”

Found in 1 field. Select a question to see its full answer.

Information Technology

125 questions in 7 technologies

#QuestionTechnologyTopicLevel
1How do you combine multiple authorization requirements within a single policy, and how are they evaluated (AND vs OR logic)? ASP.NET Core › AuthorizationASP.NET CoreAuthorizationIntermediate
2What is the difference between role-based and claims-based authorization in ASP.NET Core? ASP.NET Core › AuthorizationASP.NET CoreAuthorizationBeginner
3How do you define and apply policy-based authorization for requirements more complex than a simple role or claim check? ASP.NET Core › AuthorizationASP.NET CoreAuthorizationIntermediate
4How do you apply a global authorization policy requiring authentication by default for every endpoint, with explicit opt-out for public ones? ASP.NET Core › AuthorizationASP.NET CoreAuthorizationIntermediate
5How do you restrict access to a minimal API endpoint or endpoint group using authorization, given minimal APIs don't use controller attributes? ASP.NET Core › AuthorizationASP.NET CoreAuthorizationIntermediate
6How do you implement resource-based authorization, where the authorization decision depends on the specific object being accessed, not just the user's general permissions? ASP.NET Core › AuthorizationASP.NET CoreAuthorizationAdvanced
7How would you implement a custom IAuthorizationRequirement and IAuthorizationHandler for a business rule like 'only during business hours'? ASP.NET Core › AuthorizationASP.NET CoreAuthorizationAdvanced
8How does the AuthorizationMiddlewareResultHandler let you customize the response returned when authorization fails, beyond the default 401/403? ASP.NET Core › AuthorizationASP.NET CoreAuthorizationAdvanced
9How do you unit test custom authorization handlers in isolation, without needing a full HTTP request pipeline? ASP.NET Core › AuthorizationASP.NET CoreAuthorizationAdvanced
10How would you design an authorization system supporting dynamically-configurable, admin-managed permissions rather than hardcoded policies in code? ASP.NET Core › AuthorizationASP.NET CoreAuthorizationAdvanced