files tree made better.
This commit is contained in:
19
src/Yavsc/AuthorizationHandlers/BlogEditHandler.cs
Normal file
19
src/Yavsc/AuthorizationHandlers/BlogEditHandler.cs
Normal file
@ -0,0 +1,19 @@
|
||||
using Microsoft.AspNet.Authorization;
|
||||
using System.Security.Claims;
|
||||
using Yavsc.Models.Blog;
|
||||
|
||||
namespace Yavsc.ViewModels.Auth.Handlers
|
||||
{
|
||||
public class BlogEditHandler : AuthorizationHandler<EditRequirement, BlogPost>
|
||||
{
|
||||
protected override void Handle(AuthorizationContext context, EditRequirement requirement, BlogPost resource)
|
||||
{
|
||||
if (context.User.IsInRole(Constants.BlogModeratorGroupName))
|
||||
context.Succeed(requirement);
|
||||
else if (context.User.Identity.IsAuthenticated)
|
||||
if (resource.AuthorId == context.User.GetUserId())
|
||||
context.Succeed(requirement);
|
||||
}
|
||||
|
||||
}
|
||||
}
|
Reference in New Issue
Block a user