namespace ASC.Core; [Scope] public class AuthorizationManager { private readonly IAzService _service; private readonly TenantManager _tenantManager; public AuthorizationManager(IAzService service, TenantManager tenantManager) { _service = service; _tenantManager = tenantManager; } public IEnumerable GetAces(Guid subjectId, Guid actionId) { var aces = _service.GetAces(_tenantManager.GetCurrentTenant().Id, default); return aces .Where(a => a.Action == actionId && (a.Subject == subjectId || subjectId == Guid.Empty)) .ToList(); } public IEnumerable GetAces(Guid subjectId, Guid actionId, ISecurityObjectId objectId) { var aces = _service.GetAces(_tenantManager.GetCurrentTenant().Id, default); return FilterAces(aces, subjectId, actionId, objectId) .ToList(); } public IEnumerable GetAcesWithInherits(Guid subjectId, Guid actionId, ISecurityObjectId objectId, ISecurityObjectProvider secObjProvider) { if (objectId == null) { return GetAces(subjectId, actionId, null); } var result = new List(); var aces = _service.GetAces(_tenantManager.GetCurrentTenant().Id, default); result.AddRange(FilterAces(aces, subjectId, actionId, objectId)); var inherits = new List(); var secObjProviderHelper = new AzObjectSecurityProviderHelper(objectId, secObjProvider); while (secObjProviderHelper.NextInherit()) { inherits.AddRange(FilterAces(aces, subjectId, actionId, secObjProviderHelper.CurrentObjectId)); } inherits.AddRange(FilterAces(aces, subjectId, actionId, null)); result.AddRange(DistinctAces(inherits)); return result; } public void AddAce(AzRecord r) { _service.SaveAce(_tenantManager.GetCurrentTenant().Id, r); } public void RemoveAce(AzRecord r) { _service.RemoveAce(_tenantManager.GetCurrentTenant().Id, r); } public void RemoveAllAces(ISecurityObjectId id) { foreach (var r in GetAces(Guid.Empty, Guid.Empty, id)) { RemoveAce(r); } } private IEnumerable GetAcesInternal() { return _service.GetAces(_tenantManager.GetCurrentTenant().Id, default); } private IEnumerable DistinctAces(IEnumerable inheritAces) { var aces = new Dictionary(); foreach (var a in inheritAces) { aces[string.Format("{0}{1}{2:D}", a.Subject, a.Action, a.AceType)] = a; } return aces.Values; } private IEnumerable FilterAces(IEnumerable aces, Guid subjectId, Guid actionId, ISecurityObjectId objectId) { var objId = AzObjectIdHelper.GetFullObjectId(objectId); return aces is AzRecordStore store ? store.Get(objId).Where(a => (a.Subject == subjectId || subjectId == Guid.Empty) && (a.Action == actionId || actionId == Guid.Empty)) : aces.Where(a => (a.Subject == subjectId || subjectId == Guid.Empty) && (a.Action == actionId || actionId == Guid.Empty) && a.Object == objId); } }