July 2019
Intermediate to advanced
410 pages
10h 32m
English
We have added plenty of code into our web application, but does this really help us to restrict our pages/views from unattended requests? The Products page/view is still open; therefore, I can perform any available actions from the Products page/view:

As a user, I can see the Products option whether I am logged in or not:

The previous screenshot shows the same Products menu option after login as before login.
We can restrict the access of the Products page like this:
<li class="nav-item"> @{ if (AuthManager.IsAuthenticated) ...Read now
Unlock full access