Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
public class InsertCategoryHandler : AuthorizationHandler<InsertCategoryRequirement, Category>, IAuthorizationRequirement
{
private readonly ISecurityService _securityService;
public InsertCategoryHandler(ISecurityService securityService) => _securityService = securityService;
protected override async Task HandleRequirementAsync(AuthorizationHandlerContext context,
InsertCategoryRequirement requirement, Category category)
{
if (!(context.Resource is Category))
{
context.Fail();
return;
}
var userId = context.User.GetUserId();
var hasAdminAccess = await _securityService.HasAdmin(userId);
if (hasAdminAccess)
{
context.Succeed(requirement);
return;
}
if (string.IsNullOrEmpty(category.Id) && category.UserId == userId)
{
context.Succeed(requirement);
return;
}
context.Fail();
}
}
public class InsertCategoryRequirement : IAuthorizationRequirement
{
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session.