Only show cases with IsSensitive=false unless the current user has "View Sensitive Cases" permission

SensitiveCaseDataRestriction.cs

using DovetailCRM.Core.Authorization;
using DovetailCRM.Core.Domain.Workflow;
using FubuFastPack.Querying;
using FubuMVC.Core.Security;

namespace DovetailCRM.Core.Web.Query
{
    public class SensitiveCaseDataRestriction : IDataRestriction<Case>
    {        
        public void Apply(IDataSourceFilter<Case> filter)
        {
            if (!PrincipalRoles.IsInRole(DomainActions.ViewSensitiveCases))
            {
                filter.WhereEqual(x => x.IsSensitive, false);
            }
        }
    }
}