WIP

Yavsc/ViewModels/Auth/Handlers/CommandViewHandler.cs

@@ -0,0 +1,21 @@
+using System.Security.Claims;
+using Microsoft.AspNet.Authorization;
+
+namespace Yavsc.ViewModels.Auth.Handlers
+{
+    using Models.Booking;
+    public class CommandViewHandler : AuthorizationHandler<ViewRequirement, BookQuery>
+    {
+        protected override void Handle(AuthorizationContext context, ViewRequirement requirement, BookQuery resource)
+        {
+            if (context.User.IsInRole("FrontOffice"))
+                context.Succeed(requirement);
+            else if (context.User.Identity.IsAuthenticated)
+            if (resource.ClientId == context.User.GetUserId())
+                context.Succeed(requirement);
+            else if (resource.PerformerId == context.User.GetUserId())
+                context.Succeed(requirement);
+        }
+
+    }
+}