Csla.Validation.Shared/AuthorizationRules.cs

Go to the documentation of this file.

//-----------------------------------------------------------------------
// <copyright file="AuthorizationRules.cs" company="Marimer LLC">
//     Copyright (c) Marimer LLC. All rights reserved.
//     Website: https://cslanet.com
// </copyright>
// <summary>Provides consistent context information between the client</summary>
//-----------------------------------------------------------------------
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
using Csla.Rules;
using Csla.Rules.CommonRules;
 
namespace Csla.Security
{
  public class AuthorizationRules
  {
    #region Object Level Roles
    public static void AllowGet(Type objectType, params string[] roles)
    {
      BusinessRules.AddRule(objectType, new IsInRole(AuthorizationActions.GetObject, roles));
    }
 
    public static void DenyGet(Type objectType, params string[] roles)
    {
      BusinessRules.AddRule(objectType, new IsNotInRole(AuthorizationActions.GetObject, roles));
    }
 
    public static void AllowEdit(Type objectType, params string[] roles)
    {
      BusinessRules.AddRule(objectType, new IsInRole(AuthorizationActions.EditObject, roles));
    }
 
    public static void DenyEdit(Type objectType, params string[] roles)
    {
      BusinessRules.AddRule(objectType, new IsNotInRole(AuthorizationActions.EditObject, roles));
    }
 
    public static void AllowCreate(Type objectType, params string[] roles)
    {
      BusinessRules.AddRule(objectType, new IsInRole(AuthorizationActions.CreateObject, roles));
    }
 
    public static void DenyCreate(Type objectType, params string[] roles)
    {
      BusinessRules.AddRule(objectType, new IsNotInRole(AuthorizationActions.CreateObject, roles));
    }
 
    public static void AllowDelete(Type objectType, params string[] roles)
    {
      BusinessRules.AddRule(objectType, new IsInRole(AuthorizationActions.DeleteObject, roles));
    }
 
    public static void DenyDelete(Type objectType, params string[] roles)
    {
      BusinessRules.AddRule(objectType, new IsNotInRole(AuthorizationActions.DeleteObject, roles));
    }
 
    #endregion
 
    #region Check Object Level Roles
 
    public static bool CanCreateObject(Type objectType)
    {
      return BusinessRules.HasPermission(AuthorizationActions.CreateObject, objectType);
    }
 
    public static bool CanGetObject(Type objectType)
    {
      return BusinessRules.HasPermission(AuthorizationActions.GetObject, objectType);
    }
 
    public static bool CanEditObject(Type objectType)
    {
      return BusinessRules.HasPermission(AuthorizationActions.EditObject, objectType);
    }
 
    public static bool CanDeleteObject(Type objectType)
    {
      return BusinessRules.HasPermission(AuthorizationActions.DeleteObject, objectType);
    }
 
    #endregion
  }
}