TgsAuthorizeAttribute.cs

Go to the documentation of this file.

using System;
using System.Collections.Generic;
using System.Linq;
 
using Microsoft.AspNetCore.Authorization;
 
using Tgstation.Server.Api.Rights;
 
namespace Tgstation.Server.Host.Security
{
#pragma warning disable CA1019
    [AttributeUsage(AttributeTargets.Class | AttributeTargets.Method, AllowMultiple = true, Inherited = true)]
    sealed class TgsAuthorizeAttribute : AuthorizeAttribute
    {
        public const string PolicyName = "Policy.UserEnabled";
 
        public const string UserEnabledRole = "Role.UserEnabled";
 
        public RightsType? RightsType { get; }
 
        public TgsAuthorizeAttribute()
            : this(Enumerable.Empty<string>())
        {
        }
 
        public TgsAuthorizeAttribute(AdministrationRights requiredRights)
            : this(RightsHelper.RoleNames(requiredRights))
        {
            RightsType = Api.Rights.RightsType.Administration;
        }
 
        public TgsAuthorizeAttribute(InstanceManagerRights requiredRights)
            : this(RightsHelper.RoleNames(requiredRights))
        {
            RightsType = Api.Rights.RightsType.InstanceManager;
        }
 
        public TgsAuthorizeAttribute(RepositoryRights requiredRights)
            : this(RightsHelper.RoleNames(requiredRights))
        {
            RightsType = Api.Rights.RightsType.Repository;
        }
 
        public TgsAuthorizeAttribute(EngineRights requiredRights)
            : this(RightsHelper.RoleNames(requiredRights))
        {
            RightsType = Api.Rights.RightsType.Engine;
        }
 
        public TgsAuthorizeAttribute(DreamMakerRights requiredRights)
            : this(RightsHelper.RoleNames(requiredRights))
        {
            RightsType = Api.Rights.RightsType.DreamMaker;
        }
 
        public TgsAuthorizeAttribute(DreamDaemonRights requiredRights)
            : this(RightsHelper.RoleNames(requiredRights))
        {
            RightsType = Api.Rights.RightsType.DreamDaemon;
        }
 
        public TgsAuthorizeAttribute(ChatBotRights requiredRights)
            : this(RightsHelper.RoleNames(requiredRights))
        {
            RightsType = Api.Rights.RightsType.ChatBots;
        }
 
        public TgsAuthorizeAttribute(ConfigurationRights requiredRights)
            : this(RightsHelper.RoleNames(requiredRights))
        {
            RightsType = Api.Rights.RightsType.Configuration;
        }
 
        public TgsAuthorizeAttribute(InstancePermissionSetRights requiredRights)
            : this(RightsHelper.RoleNames(requiredRights))
        {
            RightsType = Api.Rights.RightsType.InstancePermissionSet;
        }
 
        private TgsAuthorizeAttribute(IEnumerable<string> roles)
        {
            var listRoles = roles.ToList();
            if (listRoles.Count != 0)
            {
                Roles = String.Join(",", listRoles);
            }
 
            Policy = PolicyName;
        }
    }
}