You can verify that the user has permission to view the resource by incorporating a custom authorization method that uses the IsInRole method before the application calls the Transfer method.

• 您可以在应用程序调用Transfer方法之前,通过结合使用IsInRole方法的自定义授权方法来验证用户是否有权查看资源。