AuthorizeRequest.cs

Go to the documentation of this file.

//-----------------------------------------------------------------------
// <copyright file="AuthorizeRequest.cs" company="Marimer LLC">
//     Copyright (c) Marimer LLC. All rights reserved.
//     Website: https://cslanet.com
// </copyright>
// <summary>Object containing information about the</summary>
//-----------------------------------------------------------------------
using System;
using Csla.Properties;
using Csla.Rules;
using Csla.Security;
 
namespace Csla.Server
{
  public class AuthorizeRequest
  {
    public Type ObjectType { get; private set; }
    public object RequestObject { get; private set; }
    public DataPortalOperations Operation { get; private set; }
 
    internal AuthorizeRequest(Type objectType, object requestObject, DataPortalOperations operation)
    {
      this.ObjectType = objectType;
      this.RequestObject = requestObject;
      this.Operation = operation;
    }
 
    public void CheckPermissions()
    {
      if (Operation == DataPortalOperations.Update || 
          Operation == DataPortalOperations.Execute)
      { 
         // Per-Instance checks
         if (!BusinessRules.HasPermission(Operation.ToAuthAction(), RequestObject))
         {
            throw new SecurityException(
               string.Format(Resources.UserNotAuthorizedException,
                   Operation.ToSecurityActionDescription(),
                   ObjectType.Name)
               );
         }
      }
 
      // Per-Type checks
      if (!BusinessRules.HasPermission(Operation.ToAuthAction(), ObjectType))
      {
         throw new SecurityException(
            string.Format(Resources.UserNotAuthorizedException,
                Operation.ToSecurityActionDescription(),
                ObjectType.Name)
            );
      }
    }
  }
}