Databases
StackOverflow2013
Postsdbo
POStatic method as part of a contract
Body
 

Note that there are some explanatory texts on larger screens.

plurals
  1. POStatic method as part of a contract
    text
    copied!<p>I am implementing an infrastructure for access control of models in a web application. The library has a context class that controllers (and maybe views) use for determining if the current user has access to a certain object. For keeping relevant information close to the target object, I've decided to pass on the access check request to the models themselves from the context object.</p> <p>Implementing this mechanism for model object modification is almost trivial. Declare an interface, say, <code>ICheckModifyAccess</code>; and implement it in your model. The same goes for delete check. In both these cases, it is possible to ask an instance of a model whether it is OK to modify or delete them.</p> <p>Unfortunately, it is not the case for read and create operations. These operations require that I ask the question to the model <em>class</em>. So using an interface for this is not an option.</p> <p>I ended up creating an attribute, <code>CheckCreateAccessAttribute</code>, and then ended up using this attribute to mark a static function as the interface function. Then, in my context object, I can use reflection to check if such a marked function exists, if it matches the signature I expect, and eventually call it. In case it makes a difference, the method for create access check is <code>public bool CanCreate&lt;TObj&gt;();</code>. A typical model that supports access control would add something like the following to the class:</p> <pre><code>[CheckCreateAccess] public static bool CanCreate() { return true; } </code></pre> <p>I am not very fluent in C# yet, and I have a nagging feeling that I'm doing something wrong. Can you suggest a more elegant alternative? Especially, can you get rid of examining <code>TObj</code> by reflection?</p>
 

Querying!

 
Guidance
An individual column

Larger individual text columns get their own page to allow for proper reading.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload