notazof/yavsc
1
1
Fork 0
Code Issues 1 Pull requests Projects 2 Releases 10 Packages Wiki Activity Actions

Merge from booking branch

Browse source
This commit is contained in:
Paul Schneider 2015-11-17 22:03:42 +01:00
commit 25906d0227
60 changed files with 6228 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

58
web/AuthorizeAttribute.cs Normal file
View file

@ -0,0 +1,58 @@
//
// AuthorizeAttribute.cs
//
// Author:
// Paul Schneider <paul@pschneider.fr>
//
// Copyright (c) 2015 GNU GPL
//
// This program is free software: you can redistribute it and/or modify
// it under the terms of the GNU Lesser General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU Lesser General Public License for more details.
//
// You should have received a copy of the GNU Lesser General Public License
// along with this program. If not, see <http://www.gnu.org/licenses/>.
using System;
namespace Yavsc
{
/// <summary>
/// Authorize attribute.
/// </summary>
[AttributeUsage(AttributeTargets.Class | AttributeTargets.Method, Inherited = true, AllowMultiple = true)]
public class AuthorizeAttribute: System.Web.Mvc.AuthorizeAttribute
{
/// <summary>
/// Handles the unauthorized request.
/// </summary>
/// <param name="filterContext">Filter context.</param>
protected override void HandleUnauthorizedRequest(System.Web.Mvc.AuthorizationContext filterContext)
{
if (filterContext.HttpContext.Request.IsAuthenticated)
{
if (string.IsNullOrWhiteSpace (Users) && !string.IsNullOrEmpty (Roles))
{
// let the client know which role were allowed here
// filterContext.ActionDescriptor.ControllerDescriptor.
filterContext.Result = new System.Web.Mvc.RedirectResult ("~/Home/RestrictedArea");
filterContext.Controller.ViewData ["ActionName"] = filterContext.ActionDescriptor.ActionName;
filterContext.Controller.ViewData ["ControllerName"] = filterContext.ActionDescriptor.ControllerDescriptor.ControllerName;
filterContext.Controller.ViewData ["Roles"] = Roles;
filterContext.Controller.ViewData ["Users"] = Users;
}
else filterContext.Result = new System.Web.Mvc.HttpStatusCodeResult((int)System.Net.HttpStatusCode.Forbidden);
}
else
{
base.HandleUnauthorizedRequest(filterContext);
}
}
}
}