refactoring & pv authorization

src/Yavsc/AuthorizationHandlers/AnnouceEditHandler.cs

@@ -3,8 +3,9 @@
 using System.Security.Claims;
 using Microsoft.AspNet.Authorization;
 using Yavsc.Interfaces;
+using Yavsc.ViewModels.Auth;
 
-namespace Yavsc.ViewModels.Auth.Handlers
+namespace Yavsc.AuthorizationHandlers
 {
     public class AnnouceEditHandler : AuthorizationHandler<EditRequirement, IOwned>
     {

src/Yavsc/AuthorizationHandlers/BillEditHandler.cs

@@ -1,7 +1,8 @@
 using System.Security.Claims;
 using Microsoft.AspNet.Authorization;
+using Yavsc.ViewModels.Auth;
 
-namespace Yavsc.ViewModels.Auth.Handlers
+namespace Yavsc.AuthorizationHandlers
 {
     using Billing;
     public class BillEditHandler : AuthorizationHandler<EditRequirement, IBillable>

src/Yavsc/AuthorizationHandlers/BillViewHandlers.cs

@@ -1,7 +1,8 @@
 using System.Security.Claims;
 using Microsoft.AspNet.Authorization;
+using Yavsc.ViewModels.Auth;
 
-namespace Yavsc.ViewModels.Auth.Handlers
+namespace Yavsc.AuthorizationHandlers
 {
     using Billing;
 

src/Yavsc/AuthorizationHandlers/BlogEditHandler.cs

@@ -1,8 +1,9 @@
 using Microsoft.AspNet.Authorization;
 using System.Security.Claims;
 using Yavsc.Models.Blog;
+using Yavsc.ViewModels.Auth;
 
-namespace Yavsc.ViewModels.Auth.Handlers
+namespace Yavsc.AuthorizationHandlers
 {
     public class BlogEditHandler : AuthorizationHandler<EditRequirement, BlogPost>
     {

src/Yavsc/AuthorizationHandlers/BlogViewHandler.cs

@@ -2,8 +2,9 @@ using System.Linq;
 using System.Security.Claims;
 using Microsoft.AspNet.Authorization;
 using Yavsc.Models.Blog;
+using Yavsc.ViewModels.Auth;
 
-namespace Yavsc.ViewModels.Auth.Handlers
+namespace Yavsc.AuthorizationHandlers
 {
     public class BlogViewHandler : AuthorizationHandler<ViewRequirement, BlogPost>
     {

src/Yavsc/AuthorizationHandlers/HasBadgeHandler.cs

@@ -1,6 +1,7 @@
 using Microsoft.AspNet.Authorization;
+using Yavsc.ViewModels.Auth;
 
-namespace Yavsc.ViewModels.Auth.Handlers
+namespace Yavsc.AuthorizationHandlers
 {
     public class HasBadgeHandler : AuthorizationHandler<PrivateChatEntryRequirement>
     {

src/Yavsc/AuthorizationHandlers/HasTemporaryPassHandler.cs

@@ -1,7 +1,8 @@
 using System;
 using Microsoft.AspNet.Authorization;
+using Yavsc.ViewModels.Auth;
 
-namespace Yavsc.ViewModels.Auth.Handlers
+namespace Yavsc.AuthorizationHandlers
 {
     public class HasTemporaryPassHandler : AuthorizationHandler<PrivateChatEntryRequirement>
     {
@@ -24,4 +25,4 @@ namespace Yavsc.ViewModels.Auth.Handlers
             }
         }
     }
-}
+}

src/Yavsc/AuthorizationHandlers/PostUserFileHandler.cs

@@ -1,8 +1,8 @@
 using System.Security.Claims;
 using Microsoft.AspNet.Authorization;
-using Yavsc.ViewModel.Auth;
+using Yavsc.ViewModels.Auth;
 
-namespace Yavsc.ViewModels.Auth.Handlers
+namespace Yavsc.AuthorizationHandlers
 {
     public class PostUserFileHandler : AuthorizationHandler<EditRequirement, FileSpotInfo>
     {

src/Yavsc/AuthorizationHandlers/SendMessageHandler.cs

@@ -0,0 +1,34 @@
+using System.Security.Claims;
+using Microsoft.AspNet.Authorization;
+using Yavsc.Models;
+using Yavsc.ViewModels.Auth;
+using System.Linq;
+
+namespace Yavsc.AuthorizationHandlers
+{
+    public class SendMessageHandler : AuthorizationHandler<PrivateChatEntryRequirement, string>
+    {
+        ApplicationDbContext _dbContext ;
+
+        public SendMessageHandler(ApplicationDbContext dbContext)
+        {
+            _dbContext = dbContext;
+        }
+
+        protected override void Handle(AuthorizationContext context, PrivateChatEntryRequirement requirement, string destUserId)
+        {
+            var uid = context.User.GetUserId();
+            if (context.User.IsInRole(Constants.BlogModeratorGroupName)
+            || context.User.IsInRole(Constants.AdminGroupName))
+                context.Succeed(requirement);
+            else if (!context.User.Identity.IsAuthenticated)
+                context.Fail();
+            else if (destUserId == uid)
+                context.Succeed(requirement);
+            else if (_dbContext.Banlist.Any(b=>b.TargetId == uid)) context.Fail();
+            else if (_dbContext.BlackListed.Any(b=>b.OwnerId == destUserId && b.UserId == uid)) context.Fail();
+            else context.Succeed(requirement); 
+        }
+
+    }
+}

src/Yavsc/AuthorizationHandlers/ViewFileHandler.cs

@@ -1,6 +1,7 @@
 using Microsoft.AspNet.Authorization;
+using Yavsc.ViewModels.Auth;
 
-namespace Yavsc.ViewModels.Auth.Handlers
+namespace Yavsc.AuthorizationHandlers
 {
     public class ViewFileHandler : AuthorizationHandler<ViewRequirement, ViewFileContext>
     {