Just notes, this checklist isn't done at all.

In general, try to mimic the solution ...

 

 

To enable security on admins/editors, you must create your own inherited class from ToSic.Sxc.Adam.AdamSecurityChecksBase and register it in startup.