Child Authorization Rules
Child Authorization RulesOld forum URL: forums.lhotka.net/forums/t/5746.aspx
Slayer posted on Thursday, November 06, 2008Hi All
I have gone through a lot of csla.net sample code. Is it possible to add Authorization rules to collection objects?
If i have a parent object which contains a collection of child objects, how would one authorize a user to add or remove child objects from the collection ? Or is this a sign of a bad object model?
ajj3085 replied on Thursday, November 06, 2008Well, one thing is to make sure to properly Set AllowAdd, AllowEdit, and AllowDelete on the BLB subclass. Also, you'll want to override RemoveItem and InsertItem, I believe. You'll have to throw exceptions here. The child to be contained in the BLB must also add it's own authorization rules so that properties on the child instance can't be changed.
Copyright (c) Marimer LLC