Aibek.Auth.AccessControl 3.1.4

Introduction

This library helps to check if user has access to the data and configure the data so that user gets only permitted data. It also checks if user has permission to perform specific operation with data through Breeze Context Provider.

Getting Started

1. Install library with command Install-Package Aibek.Auth.AccessControl or use Nuget Package Manager.
2. Project has to use .NET Core 2.2 or above
3. Use attributes CanAddAttribute, CanReadAttribute, CanUpdateAttribute, CanDeleteAttribute with classes to configure which permission should user have in order to perform some kind of entity operation. Use attributes CanReadAttribute, CanUpdateAttribute with properties in order to configure which permission should user have in order to read or update a specific property. Example:

[CanRead("Products.Details")]
[CanAdd("Products.Add")]
[CanDelete("Products.Delete")]
[CanUpdate("Products.Update)"]
public Product Product 
{
    [CanRead("Products.Details.Name")]
    [CanUpdate("Products.Update.Name")]
    public string Name { get; set; }
}

If you want to enable access check in context of some entity, you can specify its key, like it is kept in headers and pass IHttpContextAccessor to AccessCheck constructor.

[CanRead("Products.Details", "CompanyId")]
[CanAdd("Products.Add", "CompanyId")]
[CanDelete("Products.Delete", "CompanyId")]
[CanUpdate("Products.Update", "CompanyId")]
public Product Product 
{
    [CanRead("Products.Details.Name")]
    [CanUpdate("Products.Update.Name")]
    public string Name { get; set; }
}

4. Create object of AccessChecker<BaseType> where BaseType is interface that all your entities implement
5. Use method object AccessChecker<BaseType>.SecureData(object entity) to hide data that is not permitted to user.
6. Use method bool CheckAccess(EntityInfo entityInfo) when you save changes to check if the operation is allowed to current user.