un positionnement de paramètre workflow des pros
This commit is contained in:
parent
fbd352e788
commit
96746fcc0b
322 changed files with 25893 additions and 3844 deletions
23
Yavsc/ViewModels/Auth/EstimateViewHandler.cs
Normal file
23
Yavsc/ViewModels/Auth/EstimateViewHandler.cs
Normal file
|
|
@ -0,0 +1,23 @@
|
|||
using System.Security.Claims;
|
||||
using Microsoft.AspNet.Authorization;
|
||||
using Yavsc.Models.Billing;
|
||||
|
||||
namespace Yavsc.ViewModels.Auth
|
||||
{
|
||||
public class EstimateViewHandler : AuthorizationHandler<ViewRequirement, Estimate>
|
||||
{
|
||||
protected override void Handle(AuthorizationContext context, ViewRequirement requirement, Estimate resource)
|
||||
{
|
||||
|
||||
if (context.User.IsInRole(Constants.AdminGroupName)
|
||||
|| context.User.IsInRole(Constants.FrontOfficeGroupName))
|
||||
context.Succeed(requirement);
|
||||
else if (context.User.Identity.IsAuthenticated) {
|
||||
var uid = context.User.GetUserId();
|
||||
if (resource.OwnerId == uid || resource.ClientId == uid)
|
||||
context.Succeed(requirement);
|
||||
// TODO && ( resource.Circles == null || context.User belongs to resource.Circles )
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue