Using the Custom Authorization Policy

On Controller/Action:

[Authorize(Policy = "ResourcePermission")]
[HttpGet("products")]
public async Task<IActionResult> GetProducts()
{
    // Access check for "Product:View" is handled by the policy
    return Ok(await _dbContext.Resources.Where(r => r.Name == "Product").ToListAsync());
}

// For specific permissions, you might need a custom attribute or pass parameters
[ResourceAuthorize("Product", "Edit")] // A custom attribute simplifies this
[HttpPut("products/{id}")]
public async Task<IActionResult> UpdateProduct(int id, [FromBody] ProductUpdateDto model)
{
    // ... update logic
    return Ok();
}

[ResourceAuthorize("Product", "Edit", "Price")] // Field-level
[HttpPut("products/update-price")]
public async Task<IActionResult> UpdateProductPrice([FromBody] ProductPriceUpdateDto model)
{
    // ... update price logic
    return Ok();
}

Custom ResourceAuthorizeAttribute:

public class ResourceAuthorizeAttribute : AuthorizeAttribute
{
    public ResourceAuthorizeAttribute(string resource, string action, string fieldName = null)
    {
        Policy = $"ResourcePermission:{resource}:{action}:{fieldName}";
        // You'll need to register policies dynamically in Startup.cs
    }
}
// In Program.cs/Startup.cs:
// builder.Services.AddAuthorization(options =>
// {
//     // For dynamic policies based on attribute parameters
//     options.AddPolicy("ResourcePermission", policy =>
//         policy.Requirements.Add(new ResourcePermissionRequirement()));

//     // Example of registering a specific policy if not using dynamic policy names
//     // options.AddPolicy("Product:View", policy =>
//     //     policy.Requirements.Add(new ResourcePermissionRequirement("Product", "View")));
// });
// For dynamic policy creation, you might need a custom IAuthorizationPolicyProvider
// or generate policies for all known resources/actions at startup.

5. Data Models for Custom Tables

EF Core models for your existing tables.

Resource.cs:

public class Resource
{
    public int ResourceId { get; set; }
    public string Name { get; set; }
    public string DisplayName { get; set; }
    public string Url { get; set; }
    public string HttpMethod { get; set; }
    public int? ParentId { get; set; }
    public string Module { get; set; }
    public string Description { get; set; }
    public bool IsActive { get; set; }
    public DateTime CreatedAt { get; set; }
    public DateTime UpdatedAt { get; set; }
    public byte[] RowVersion { get; set; }
}

Permission.cs:

public class Permission
{
    public int PermissionId { get; set; }
    public string Resource { get; set; }
    public string FieldName { get; set; }
    public string Action { get; set; }
    public string Description { get; set; }
    public bool IsActive { get; set; }
    public DateTime CreatedAt { get; set; }
    public DateTime UpdatedAt { get; set; }
    public byte[] RowVersion { get; set; }
    public int? ResourceId { get; set; } // Added based on your ALTER TABLE
}

RolePermission.cs:

public class RolePermission
{
    public int RolePermissionId { get; set; }
    public int RoleId { get; set; }
    public int PermissionId { get; set; }
    public bool IsAllowed { get; set; }
    public DateTime CreatedAt { get; set; }

    public virtual ApplicationRole Role { get; set; }
    public virtual Permission Permission { get; set; }
}

UserPermission.cs:

public class UserPermission
{
    public int UserPermissionId { get; set; }
    public int UserId { get; set; }
    public int PermissionId { get; set; }
    public bool IsAl