Adjustible Authorisation rules

Tobique posted on Monday, July 30, 2012

Hi,

 

sorry to bother you with probably a silly question but i have a problem,

I have to create a rule in witch the validation action is variable the property info is variable and the role is variable so they can be uploaded from a database any suggestions?

 

thx

Tobique replied on Monday, July 30, 2012

a small example,

BusinessRules.AddRule(new Csla.Rules.CommonRules.IsInRole(action, property,competence))

 

how can i implement this?

JonnyBee replied on Monday, July 30, 2012

Do these "compentencies" vary between the objects? Is these rules for property or object level authorization.

You must remember that you can only have 1 rule for each Property and AuthorizationAction and these are defined at the "type" level.

So - in order to use the AuthzRules you must either have

• all rules with action and competence defined "globally" when the first object of this type is created
• or add all rules with knowlegde of how to get cached values (competencies) from the database. 

A third option for property authorization is to implement your own overrides on

• CanReadProperty
• CanWriteProperty
• CanExecuteMethod

and make these check against cached values from the database.

You must also remember to set CacheResult = false on the property level rules if you choose to implement as AuthorizationRules and the result may vary from the first execution of the rule.