예제 #1
0
        protected override async Task HandleDeleteAsync(AuthorizationHandlerContext context,
                                                        DynamicEntityOperationAuthorizationRequirement requirement, DynamicEntityOperationInfoModel resource)
        {
            if (resource.ModelDefinition.PermissionSet.AnonymousDelete)
            {
                context.Succeed(requirement);
                return;
            }

            await SetSucceedIfHasPermissionAsync(resource.ModelDefinition.PermissionSet.Delete, context, requirement);
        }
예제 #2
0
        protected virtual async Task SetSucceedIfHasPermissionAsync([CanBeNull] string permission,
                                                                    AuthorizationHandlerContext context, DynamicEntityOperationAuthorizationRequirement requirement)
        {
            if (!_currentPrincipalAccessor.Principal.Identity.IsAuthenticated)
            {
                return;
            }

            if (!permission.IsNullOrWhiteSpace() && !await _permissionChecker.IsGrantedAsync(permission))
            {
                return;
            }

            context.Succeed(requirement);
        }