AzManAccessControlChecker.cs

namespace AzManWrapperLib
{
    using AZROLESLib;
    using System;
    using System.Runtime.InteropServices;
    using System.Security.Principal;

    public class AzManAccessControlChecker : IAccessControlChecker, IDisposable
    {
        #region Private Fields

        private readonly IAzApplication _application;

        #endregion Private Fields

        // @"msxml://C:\Examples\AzMan\AzManXmlStore\AzManStore.xml"
        // "TradeExecutionApp"
        public AzManAccessControlChecker(string connectionString, string applicationName)
        {
            var azAuthorizationStore = new AzAuthorizationStore();
            azAuthorizationStore.Initialize(0, connectionString, null);
            azAuthorizationStore.UpdateCache(null);

            _application = azAuthorizationStore.OpenApplication(applicationName, null);
        }
        
        public bool IsAllowedAccess(Operation operation, IIdentity identity)
        {
            string operationName = Enum.GetName(typeof(Operation), operation);
            IAzClientContext3 context = (IAzClientContext3)_application.InitializeClientContextFromName(identity.Name);

            bool ret = false;
            try
            {
                ret = context.AccessCheck2(operationName, string.Empty, (int)operation) == 0;
            }
            catch 
            {
                // Log failure for administrator
            }


            return ret;                        
        }

        #region IDisposable Implementation

        public void Dispose()
        {
            Marshal.ReleaseComObject(_application);
        }

        #endregion IDisposable Implementation
    }
}