Csla.Web.Mvc.Shared/CslaPermissionRequirement.cs

Go to the documentation of this file.

//-----------------------------------------------------------------------
// <copyright file="HasPermissionAttribute.cs" company="Marimer LLC">
//     Copyright (c) Marimer LLC. All rights reserved.
//     Website: https://cslanet.com
// </copyright>
// <summary>Restricts callers to an action method.</summary>
//-----------------------------------------------------------------------
#if NETSTANDARD2_0 || NET5_0 || NETCORE3_1
using System;
using System.Threading.Tasks;
using Csla.Rules;
using Microsoft.AspNetCore.Authorization;
 
namespace Csla.Web.Mvc
{
  public class CslaPermissionRequirement : IAuthorizationRequirement
  {
    public AuthorizationActions Action { get; }
    public Type ObjectType { get; }
 
    public CslaPermissionRequirement(AuthorizationActions action, Type objectType)
    {
      Action = action;
      ObjectType = objectType;
    }
  }
 
  public class CslaPermissionHandler : AuthorizationHandler<CslaPermissionRequirement>
  {
    public override Task HandleAsync(AuthorizationHandlerContext context)
    {
      foreach (var item in context.PendingRequirements)
        if (item is CslaPermissionRequirement cr)
          HandleRequirementAsync(context, cr);
      return Task.CompletedTask;
    }
 
    protected override Task HandleRequirementAsync(AuthorizationHandlerContext context, 
      CslaPermissionRequirement requirement)
    {
      if (context.User == null || !context.User.Identity.IsAuthenticated)
        context.Fail();
      else if (BusinessRules.HasPermission(requirement.Action, requirement.ObjectType))
        context.Succeed(requirement);
      return Task.CompletedTask;
    }
  }
}
#endif