IsGrantedExtensions.CanRead(SecurityStrategy, Object, String) Method

Checks whether the current user can read the specified object or its member.

Namespace: DevExpress.ExpressApp.Security

Assembly: DevExpress.ExpressApp.Security.v24.1.dll

NuGet Package: DevExpress.ExpressApp.Security

Declaration

C#

public static bool CanRead(
    this SecurityStrategy security,
    object targetObject,
    string memberName = null
)

VB.NET

<ExtensionAttribute>
Public Shared Function CanRead(
    security As SecurityStrategy,
    targetObject As Object,
    memberName As String = Nothing
) As Boolean

Parameters

Name	Type	Description
security	SecurityStrategy	A SecurityStrategy object that specifies an application’s Security Strategy.
targetObject	Object	An Object this method checks.

Optional Parameters

Name	Type	Default	Description
memberName	String	null	A String that is a name of the targetObject‘s member this method checks. This parameter is optional.

Returns

Type	Description
Boolean	true, if the current user can read the specified object or its members; otherwise, false.

Remarks

Important

This overload of the CanRead method may reduce performance and cause incorrect behavior in some usage scenarios. We recommend that you always use the CanRead method’s overloads that accept an Object Space as a parameter to check permissions for a specific object.

The following example shows how to use this method.

C#

using DevExpress.ExpressApp;
using DevExpress.ExpressApp.Security;
using System;
// ...
public class CheckReadPermissionController : ObjectViewController<ListView, Contact> {
    SecurityStrategy securityStrategy;
    protected override void OnActivated() {
        base.OnActivated();
        securityStrategy = Application.GetSecurityStrategy();
        View.CurrentObjectChanged += View_CurrentObjectChanged;
    }
    private void View_CurrentObjectChanged(object sender, EventArgs e) {
        Department department = ViewCurrentObject.Department;
        if (department!= null && !securityStrategy.CanRead(department, nameof(Department.Office))) {
            // ...
        }
    }
}