notazof/yavsc
1
1
Fork 0
Code Issues Pull requests Projects 1 Releases 4 Packages Wiki Activity Actions

estimate view authorization

Browse source
This commit is contained in:
Paul Schneider 2016-12-02 13:22:39 +01:00
commit 5159723eab
7 changed files with 71 additions and 28 deletions
Download patch file Download diff file Expand all files Collapse all files

21
Yavsc/ViewModels/Auth/EstimateViewHandler.cs
View file

@ -6,20 +6,17 @@ namespace Yavsc.ViewModels.Auth
{
public class EstimateViewHandler : AuthorizationHandler<ViewRequirement, Estimate>
{
protected override void Handle(AuthorizationContext context, ViewRequirement requirement, Estimate resource)
protected override void Handle(AuthorizationContext context, ViewRequirement requirement, Estimate resource)
{
if (context.User.IsInRole("Moderator"))
context.Succeed(requirement);
else if (!context.User.Identity.IsAuthenticated)
context.Fail();
else {
var uid = context.User.GetUserId();
if (resource.OwnerId == uid || resource.Query.ClientId == uid)
context.Succeed(requirement);
else
// TODO && ( resource.Circles == null || context.User belongs to resource.Circles )
context.Fail();
if (context.User.IsInRole(Constants.AdminGroupName)
|| context.User.IsInRole(Constants.FrontOfficeGroupName))
context.Succeed(requirement);
else if (context.User.Identity.IsAuthenticated) {
var uid = context.User.GetUserId();
if (resource.OwnerId == uid || resource.ClientId == uid)
context.Succeed(requirement);
// TODO && ( resource.Circles == null || context.User belongs to resource.Circles )
}
}
}