https://docs.microsoft.com/en-us/aspnet/core/security/authorization/resourcebased?tabs=aspnetcore2x#operational-requirements

• We can create handler automatically.
• We can restrict data access based on CRUD operations automatically.

See also aspnetboilerplate/aspnetboilerplate#3231