public DefaultRequirementAttribute(string resource, ResourceOperation operation, string policy = "DefaultAuthorization") : base(policy) { if (resource == null) { throw new ArgumentNullException(nameof(resource)); } Resource = resource; Operation = operation.ToString(); var policyBuilder = new StringBuilder(); Policy = policyBuilder.Append(Policy).Append("-").Append(Resource).Append("-").Append(Operation).ToString(); }