{"action":"opened","issue":{"url":"https://api.github.com/repos/TypecastException/AspNetIdentity2GroupPermissions/issues/10","repository_url":"https://api.github.com/repos/TypecastException/AspNetIdentity2GroupPermissions","labels_url":"https://api.github.com/repos/TypecastException/AspNetIdentity2GroupPermissions/issues/10/labels{/name}","comments_url":"https://api.github.com/repos/TypecastException/AspNetIdentity2GroupPermissions/issues/10/comments","events_url":"https://api.github.com/repos/TypecastException/AspNetIdentity2GroupPermissions/issues/10/events","html_url":"https://github.com/TypecastException/AspNetIdentity2GroupPermissions/issues/10","id":135566338,"number":10,"title":"How to use Group to Authorize","user":{"login":"mwpowellhtx","id":1824187,"avatar_url":"https://avatars.githubusercontent.com/u/1824187?v=3","gravatar_id":"","url":"https://api.github.com/users/mwpowellhtx","html_url":"https://github.com/mwpowellhtx","followers_url":"https://api.github.com/users/mwpowellhtx/followers","following_url":"https://api.github.com/users/mwpowellhtx/following{/other_user}","gists_url":"https://api.github.com/users/mwpowellhtx/gists{/gist_id}","starred_url":"https://api.github.com/users/mwpowellhtx/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mwpowellhtx/subscriptions","organizations_url":"https://api.github.com/users/mwpowellhtx/orgs","repos_url":"https://api.github.com/users/mwpowellhtx/repos","events_url":"https://api.github.com/users/mwpowellhtx/events{/privacy}","received_events_url":"https://api.github.com/users/mwpowellhtx/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-02-22T22:32:39Z","updated_at":"2016-02-22T22:32:39Z","closed_at":null,"body":"I see in a couple of spots where you call out ``\"Admin\"`` for purposes of Role-based Authorization. But I do not see where you incorporate ``Group`` in any authorization handshakes. Have I missed something, or is that handshake TBD? Via the AuthorizeAttribute mechanism? Or other Startup request pipeline?"}}