ASPSecurityKit.Authorization

Assembly: ASPSecurityKit
Summary: Provides types that implement activity-based, data-aware authorization feature of ASPSecurityKit.

Classes

AuthorizeAttribute

Attribute to indicate that a given property or operation parameter should be authorized by the IEntityIdAuthorizer. Use this attribute to specify such properties or operation parameter which the IdMemberSelector would not otherwise match for id authorization.

DoNotAuthorizeAttribute

Attribute to indicate that a given property or operation parameter should not be authorized by the IEntityIdAuthorizer. Use this attribute to exclude specific properties or operation parameter which the IdMemberSelector would otherwise match for id authorization.

EntityIdAuthorizer<TIdMemberReference>

Implements IEntityIdAuthorizer to provide data authorization capabilities on operation parameters, request DTOs etc. in conjunction with IReferencesProvider.

IdMemberReference<TIdReference>

Provides an implementation of the IIdMemberReference model.

IdReference<TId>

Provides an implementation of the IIdReference model.

MemberInfo

Represents metadata about a member being evaluated by EntityIdAuthorizer during object tree traversal.

NotAReferencesLoaderAttribute

Attribute to indicate that a given method is not references loader method and ReferencesProviderBase<TIdMemberReference,TIdReference> should ignore it.

ReferencesProviderBase<TIdMemberReference,TIdReference>

Provides an implementation for IReferencesProvider to aid in getting related references to authorize entityIds. See remarks for more details.

Interfaces

IEntityIdAuthorizer

Provides an interface to perform data authorization on operation parameters, request DTOs etc. in conjunction with IReferencesProvider.

IIdMemberReference

Interface to represent an entityId member model.

IIdReference

Interface to represent a related reference model.

IReferencesProvider<TIdMemberReference>

Provides an interface to get related references to perform data authorization on entityIds. Used by IEntityIdAuthorizer. To learn more visit https://ASPSecurityKit.net/docs/article/how-to-perform-activity-based-data-aware-authorization/#obtaining-related-references