private Task<bool> CheckPersonAccessAsync(ResourceAuthorizationContext context)
{
// Do not allow anonymous
if (!context.Principal.Identity.IsAuthenticated)
{
return Nok();
}
// View single person action
if (context.Action() == TylerResources.Actions.View)
{
// Get the key passed in to the OData API call (e.g. "/People(1)", 1 being the key)
var key = String.Empty;
if (context.TryGetContextDataKey(out key))
{
return CheckAccessByKeyAsync(context, key);
}
}
return Nok();
}
