WIP

2017-01-19 12:59:49 +01:00
parent 3118b2b14e
commit 8f0a2439b7
60 changed files with 874 additions and 209 deletions
--- a/Yavsc/ViewModels/Auth/Handlers/BlogViewHandler.cs
+++ b/Yavsc/ViewModels/Auth/Handlers/BlogViewHandler.cs
@ -0,0 +1,22 @@
+using System.Security.Claims;
+using Microsoft.AspNet.Authorization;
+using Yavsc.Models;
+
+namespace Yavsc.ViewModels.Auth.Handlers
+{
+    public class BlogViewHandler : AuthorizationHandler<ViewRequirement, Blog>
+    {
+        protected override void Handle(AuthorizationContext context, ViewRequirement requirement, Blog resource)
+        {
+            if (context.User.IsInRole(Constants.BlogModeratorGroupName)
+            || context.User.IsInRole(Constants.AdminGroupName))
+                context.Succeed(requirement);
+            else if (context.User.Identity.IsAuthenticated)
+            if (resource.AuthorId == context.User.GetUserId())
+                context.Succeed(requirement); 
+            else if (resource.Visible)
+            // TODO && ( resource.Circles == null || context.User belongs to resource.Circles )
+                context.Succeed(requirement); 
+        }
+    }
+}