protected void ValidateAuthorization(IAccountOwnedEntity entity)
{
if (!Thread.CurrentPrincipal.IsInRole(Security.CarRentalAdminRole))
{
if (_LoginName == string.Empty || entity.OwnerAccountId != _AuthorizationAccount.AccountId)
{
throw new AuthorizationValidationException("Attempt to access a secure record with improper user authorization validation.");
}
}
}
protected void ValidateAuthorization(IAccountOwnedEntity entity)
{
if (!Thread.CurrentPrincipal.IsInRole(Security.CarRentalAdminRole))
{
if (_LoginName != string.Empty && entity.OwnerAccountId != _AuthorizationAccount.AccountId)
{
var ex = new AuthorizationValidationException("Attempt to access a secure record for another user.");
throw new FaultException <AuthorizationValidationException>(ex, ex.Message);
}
}
}
protected void ValidateAuthorization(IAccountOwnedEntity entity)
{
if (!Thread.CurrentPrincipal.IsInRole(SecurityValueObject.JonMtaaniAdminRole))
{
if (_AuthorizationAccount != null)
{
if (_LoginName != string.Empty && entity.OwnerAccountId != _AuthorizationAccount.Id)
{
AuthorizationValidationException ex = new AuthorizationValidationException("Attempt to access a secure record with improper user authorization validation.");
throw new FaultException <AuthorizationValidationException>(ex, ex.Message);
}
}
}
}
protected void ValidateAuthorization(IAccountOwnedEntity account)
{
if (!Thread.CurrentPrincipal.IsInRole(Security.CarRentalAdmin))
{
if (_AuthorizationAccount != null)
{
if (_LoginName != string.Empty && account.OwnerAccountId != _AuthorizationAccount.AccountId)
{
AuthorizationValidationException ex = new AuthorizationValidationException("Attempt to access secure record");
throw new FaultException <AuthorizationValidationException>(ex, ex.Message);
}
}
}
}
protected void ValidateAuthorization(IAccountOwnedEntity entity)
{
if (!Thread.CurrentPrincipal.IsInRole(OCOApp.Security.Admin))
{
if (_AuthorizationAccount != null)
{
if (_LoginName != string.Empty && entity.OwnerAccountID != _AuthorizationAccount.AccountID)
{
AuthorizationValidationFault fault = new AuthorizationValidationFault(
"Attempt to access a secure record with improper user authorization validation.");
throw new FaultException <AuthorizationValidationFault>(fault, fault.Message);
}
}
}
}
protected void ValidateAuthorization(IAccountOwnedEntity entity)
{
if (!Thread.CurrentPrincipal.IsInRole(Security.Car_Rental_Admin_Role))
{
if (this.authorizationAccount != null)
{
if (this.loginName != string.Empty &&
entity.OwnerAccountId != this.authorizationAccount.AccountId)
{
var ex = new AuthorizationValidationException(
"Attempt to access a secure record with improper user authorization validation.");
throw new FaultException <AuthorizationValidationException>(ex, ex.Message);
}
}
}
}
