[Authorize(Policy = AuthorizationPolicies.SectionAccessContent)]

[HasSection("mySectionAlias")]

policy.AuthenticationSchemes.Add(OpenIddictValidationAspNetCoreDefaults.AuthenticationScheme);

csharp
AuthorizationResult authorizationResult = await _authorizationService.AuthorizeResourceAsync(
            User,
            ContentPermissionResource.WithKeys(ActionMove.ActionLetter, new[] { moveDocumentRequestModel.Target?.Id, id }),
            AuthorizationPolicies.ContentPermissionByResource);

ActionMove.ActionLetter

csharp
builder.Services.AddAuthorization(options =>
{
    options.AddPolicy("HasExaminePeekEnabled", policy =>
        policy.Requirements.Add(new CheckDocumentPermision("HasExaminePeekCustomPermissionVerb")));
});

[Authorize(Policy="HasExaminePeekEnabled")]

csharp
builder.Services.AddAuthorization(options =>
{
    options.AddPolicy("IsWarren", policy =>
    {
        // For simple stuff - saves writing a requirement and handler
        policy.RequireAssertion(context =>
        {
            // Simple example to check the Given Name claim contains Warren
            // So if you change the name of your user to include warren it will pass
            // Other simple example could be to check the domain
            // of the email address found 'context.User.Identity.Name'
            return context.User.GetClaim(ClaimTypes.GivenName).ToLower().Contains("warren");
        });
    });
});

[Authorize(Policy = "IsWarren")]

IPermissionResource