IClaimSecurityService¶
IClaimSecurityService declares the contract for computing a user's conflict/secure claim access; it is implemented and enforced entirely in SAIF.Services.Security.ClaimSecurityService using the ConflictClaim and SecureClaim AD resources, and consumed by claim and legal controller base classes — see Security and authorization.
Purpose¶
- Declares
GetClaimSecurity(IClaimSecurityAttributes)and its user-id overload, returning aClaimSecurityAccesscomposed from claim flags and AD-resource checks (data-level authorization finding DLA-CORE-02). - Declares
LoadClaimSecurityoverloads (forIClaimSecurityAttributesand for a user id plusIClaimSecurityAttributes) used to populate security state on a claim contract.
Context¶
- Namespace:
SAIF.Core.Contracts.Security - Kind: Interface
- Assembly/package:
SAIF.Core(NuGet packageSAIF.SAIFCode.Core)
Public members¶
| Member | Signature | Purpose |
|---|---|---|
GetClaimSecurity |
ClaimSecurityAccess GetClaimSecurity(IClaimSecurityAttributes secureClaimAttributes) |
Returns claim security, given secureClaimAttributes*. |
LoadClaimSecurity |
void LoadClaimSecurity(IClaimSecurityAttributes secureClaimAttributes) |
Loads claim security, given secureClaimAttributes*. |
Behavioral notes¶
- This library declares the contract only; enforcement (the
IsAuthorizedcalls) is implemented inSAIF.Services.Security.ClaimSecurityService— see Security and authorization.
Note: Statements marked with
*were inferred from code structure, naming conventions, or contextual evidence where direct confirmation was not available in source artifacts. Statements marked with**could not be confirmed; treat as unknown until verified.
Sources¶
- Core/SAIF.Core/Contracts/Security/IClaimSecurityService.cs