Permissions with Policy and Claims

frank-liu-toronto · Jun 11, 2024 · e9465e2 · e9465e2
1 parent 4b92954
commit e9465e2
Show file tree

Hide file tree

Showing 10 changed files with 17 additions and 10 deletions.
diff --git a/IMS.WebApp/Components/Pages/Activities/ProduceProduct.razor b/IMS.WebApp/Components/Pages/Activities/ProduceProduct.razor
@@ -1,6 +1,6 @@
 @page "/produce"
 
-@attribute [Authorize]
+@attribute [Authorize(Policy = "Productions")]
 
 @rendermode InteractiveServer
 

diff --git a/IMS.WebApp/Components/Pages/Activities/PurchaseInventory.razor b/IMS.WebApp/Components/Pages/Activities/PurchaseInventory.razor
@@ -2,7 +2,7 @@
 
 @using static IMS.WebApp.Components.Controls.Common.AutoCompleteComponent
 
-@attribute [Authorize]
+@attribute [Authorize(Policy = "Purchasers")]
 
 @rendermode InteractiveServer
 

diff --git a/IMS.WebApp/Components/Pages/Activities/SellProduct.razor b/IMS.WebApp/Components/Pages/Activities/SellProduct.razor
@@ -2,7 +2,7 @@
 
 @page "/sell"
 
-@attribute [Authorize]
+@attribute [Authorize(Policy = "Sales")]
 
 @rendermode InteractiveServer
 

diff --git a/IMS.WebApp/Components/Pages/Inventories/AddInventory.razor b/IMS.WebApp/Components/Pages/Inventories/AddInventory.razor
@@ -1,6 +1,6 @@
 @page "/addinventory"
 
-@attribute [Authorize]
+@attribute [Authorize(Policy = "Inventory")]
 
 @inject IAddInventoryUseCase AddInventoryUseCase
 @inject NavigationManager NavigationManager

diff --git a/IMS.WebApp/Components/Pages/Inventories/EditInventory.razor b/IMS.WebApp/Components/Pages/Inventories/EditInventory.razor
@@ -1,6 +1,6 @@
 @page "/editinventory/{invId:int}"
 
-@attribute [Authorize]
+@attribute [Authorize(Policy = "Inventory")]
 
 @inject NavigationManager NavigationManager
 @inject IViewInventoryByIdUseCase ViewInventoryByIdUseCase

diff --git a/IMS.WebApp/Components/Pages/Inventories/InventoryList.razor b/IMS.WebApp/Components/Pages/Inventories/InventoryList.razor
@@ -1,6 +1,6 @@
 @page "/inventories"
 
-@attribute [Authorize]
+@attribute [Authorize(Policy = "Inventory")]
 
 <h3>Inventory List</h3>
 <br/>

diff --git a/IMS.WebApp/Components/Pages/Products/AddProduct.razor b/IMS.WebApp/Components/Pages/Products/AddProduct.razor
@@ -1,6 +1,6 @@
 @page "/addproduct"
 
-@attribute [Authorize]
+@attribute [Authorize(Policy = "Inventory")]
 
 @rendermode InteractiveServer
 

diff --git a/IMS.WebApp/Components/Pages/Products/EditProduct.razor b/IMS.WebApp/Components/Pages/Products/EditProduct.razor
@@ -1,6 +1,6 @@
 @page "/editproduct/{id:int}"
 
-@attribute [Authorize]
+@attribute [Authorize(Policy = "Inventory")]
 
 @rendermode InteractiveServer
 

diff --git a/IMS.WebApp/Components/Pages/Products/ProductList.razor b/IMS.WebApp/Components/Pages/Products/ProductList.razor
@@ -1,6 +1,6 @@
 @page "/products"
 
-@attribute [Authorize]
+@attribute [Authorize(Policy = "Inventory")]
 
 <h3>Product List</h3>
 <br/>

diff --git a/IMS.WebApp/Program.cs b/IMS.WebApp/Program.cs
@@ -28,7 +28,14 @@
 builder.Services.AddScoped<IdentityRedirectManager>();
 builder.Services.AddScoped<AuthenticationStateProvider, ServerAuthenticationStateProvider>();
 
-builder.Services.AddAuthorization();
+builder.Services.AddAuthorization(options =>
+{
+    options.AddPolicy("Admin", policy => policy.RequireClaim("Department", "Administration"));
+    options.AddPolicy("Inventory", policy => policy.RequireClaim("Department", "InventoryManagement"));
+    options.AddPolicy("Sales", policy => policy.RequireClaim("Department", "Sales"));
+    options.AddPolicy("Purchasers", policy => policy.RequireClaim("Department", "Purchasing"));
+    options.AddPolicy("Productions", policy => policy.RequireClaim("Department", "ProducitonManagement"));
+});
 builder.Services.AddAuthentication(options =>
 {
     options.DefaultScheme = IdentityConstants.ApplicationScheme;