protected override async Task HandleGetInfoAsync(AuthorizationHandlerContext context, OperationAuthorizationRequirement requirement,
FileOperationInfoModel resource)
{
context.Succeed(requirement); // Allow everyone to see the files.
await Task.CompletedTask;
}
protected override async Task HandleDeleteAsync(AuthorizationHandlerContext context, OperationAuthorizationRequirement requirement,
FileOperationInfoModel resource)
{
//context.Fail(); // Files cannot be deleted.
context.Succeed(requirement);
await Task.CompletedTask;
}
protected override async Task HandleDeleteAsync(AuthorizationHandlerContext context, OperationAuthorizationRequirement requirement,
FileOperationInfoModel resource)
{
if (context.User.FindTenantId() == null && context.User.FindUserId() == resource.OwnerUserId)
{
context.Succeed(requirement); // Host-side owner users can update their uploaded files.
return;
}
context.Fail(); // Files cannot be deleted.
await Task.CompletedTask;
}
protected override async Task HandleMoveAsync(AuthorizationHandlerContext context, OperationAuthorizationRequirement requirement,
FileOperationInfoModel resource)
{
if (resource.File.FileType == FileType.Directory)
{
context.Fail(); // Directories (a special type of file) cannot be moved.
return;
}
context.Succeed(requirement);
await Task.CompletedTask;
}
protected override async Task HandleCreateAsync(AuthorizationHandlerContext context, OperationAuthorizationRequirement requirement,
FileOperationInfoModel resource)
{
if (context.User.FindUserId() == resource.OwnerUserId)
{
context.Succeed(requirement); // Owner users can upload a new file.
return;
}
context.Fail();
await Task.CompletedTask;
}
protected override async Task HandleGetDownloadInfoAsync(AuthorizationHandlerContext context, OperationAuthorizationRequirement requirement,
FileOperationInfoModel resource)
{
if (_clock.Now <= resource.File.CreationTime + TimeSpan.FromDays(7))
{
context.Succeed(requirement); // Everyone can download in 7 days from the file was uploaded.
return;
}
context.Fail();
await Task.CompletedTask;
}
protected override async Task HandleDeleteAsync(AuthorizationHandlerContext context, OperationAuthorizationRequirement requirement,
FileOperationInfoModel resource)
{
context.Fail(); // Files cannot be deleted.
}
