Skip to content

IClaimSecurityService

IClaimSecurityService declares the contract for computing a user's conflict/secure claim access; it is implemented and enforced entirely in SAIF.Services.Security.ClaimSecurityService using the ConflictClaim and SecureClaim AD resources, and consumed by claim and legal controller base classes — see Security and authorization.

Purpose

  • Declares GetClaimSecurity(IClaimSecurityAttributes) and its user-id overload, returning a ClaimSecurityAccess composed from claim flags and AD-resource checks (data-level authorization finding DLA-CORE-02).
  • Declares LoadClaimSecurity overloads (for IClaimSecurityAttributes and for a user id plus IClaimSecurityAttributes) used to populate security state on a claim contract.

Context

  • Namespace: SAIF.Core.Contracts.Security
  • Kind: Interface
  • Assembly/package: SAIF.Core (NuGet package SAIF.SAIFCode.Core)

Public members

Member Signature Purpose
GetClaimSecurity ClaimSecurityAccess GetClaimSecurity(IClaimSecurityAttributes secureClaimAttributes) Returns claim security, given secureClaimAttributes*.
LoadClaimSecurity void LoadClaimSecurity(IClaimSecurityAttributes secureClaimAttributes) Loads claim security, given secureClaimAttributes*.

Behavioral notes

  • This library declares the contract only; enforcement (the IsAuthorized calls) is implemented in SAIF.Services.Security.ClaimSecurityService — see Security and authorization.

Note: Statements marked with * were inferred from code structure, naming conventions, or contextual evidence where direct confirmation was not available in source artifacts. Statements marked with ** could not be confirmed; treat as unknown until verified.

Sources

  • Core/SAIF.Core/Contracts/Security/IClaimSecurityService.cs