---
title: IClaimSecurityService
summary: API reference for IClaimSecurityService.
status: draft
owner: SAIF Doc Gen
last_reviewed: 2026-09-24
library: SAIF.SAIFCode.Core
reference_type: package
---

# IClaimSecurityService

`IClaimSecurityService` declares the contract for computing a user's conflict/secure claim access; it is implemented and enforced entirely in `SAIF.Services.Security.ClaimSecurityService` using the `ConflictClaim` and `SecureClaim` AD resources, and consumed by claim and legal controller base classes — see [Security and authorization](../../security-authorization.md).

## Purpose
- Declares `GetClaimSecurity(IClaimSecurityAttributes)` and its user-id overload, returning a `ClaimSecurityAccess` composed from claim flags and AD-resource checks (data-level authorization finding [DLA-CORE-02](../../security-authorization.md#data-level-authorization)).
- Declares `LoadClaimSecurity` overloads (for `IClaimSecurityAttributes` and for a user id plus `IClaimSecurityAttributes`) used to populate security state on a claim contract.

## Context
- Namespace: `SAIF.Core.Contracts.Security`
- Kind: Interface
- Assembly/package: `SAIF.Core` (NuGet package `SAIF.SAIFCode.Core`)

## Public members
| Member | Signature | Purpose |
| --- | --- | --- |
| `GetClaimSecurity` | `ClaimSecurityAccess GetClaimSecurity(IClaimSecurityAttributes secureClaimAttributes)` | Returns claim security, given `secureClaimAttributes`*. |
| `LoadClaimSecurity` | `void LoadClaimSecurity(IClaimSecurityAttributes secureClaimAttributes)` | Loads claim security, given `secureClaimAttributes`*. |

## Behavioral notes
- This library declares the contract only; enforcement (the `IsAuthorized` calls) is implemented in `SAIF.Services.Security.ClaimSecurityService` — see [Security and authorization](../../security-authorization.md).

> **Note:** Statements marked with `*` were inferred from code structure, naming
> conventions, or contextual evidence where direct confirmation was not available
> in source artifacts. Statements marked with `**` could not be confirmed; treat
> as unknown until verified.

## Sources
- Core/SAIF.Core/Contracts/Security/IClaimSecurityService.cs