I'm attempting to create an extension to a vendor's legacy application, using Core 2 MVC.

The application includes a Users table that contains user-specify information (e.g. ID, account, password).

What's the recommended way to use this table with the Identity class? Is an instance of this class (the current user) available in the controller?

What's the recommend approach to secure the user's Details (/Users/Details/{id}) from access by other users?

Thanks.