Are claims based identities a way to implement more granular control of a identity that is part of a role?
My theoretical best guess, since I don't know at this point, is that the answer to my own question is yes.
I am guessing that roles are composed(or made up of) claims that authorize what a user can do. And possibly cannot do. This raises another question, can claims restrict access as well as grant it to certain methods in a web api?
So for real wordl examples. If I create a user role called "Admin". Maybe I would add 5 claims to that "Admin" role so that all users that are a part of the "Admin" role can excute those 5 api methods because they have the proper claims. But maybe I want
to add a user to the "Admin" role I don't fully trust. So, I could either A)add him to the "Admin" role and take away 2 of the most powerful claims or B)not add him to the "Admin" role at all but instead grant t ...
Go to the complete details ...