IsGrantedExtensions.CanWriteByUser(SecurityStrategy, IPermissionPolicyUser, Object, String) Method
Checks whether the specified user can write the specified object or its member.
Namespace: DevExpress.ExpressApp.Security
Assembly: DevExpress.ExpressApp.Security.v24.1.dll
NuGet Package: DevExpress.ExpressApp.Security
Declaration
Parameters
Name | Type | Description |
---|---|---|
security | SecurityStrategy | A SecurityStrategy object that specifies an application’s Security Strategy. |
targetUser | IPermissionPolicyUser | An IPermissionPolicyUser object that is a user this method checks. |
targetObject | Object | An Object this method checks. |
Optional Parameters
Name | Type | Default | Description |
---|---|---|---|
memberName | String | null | A String that is a name of the targetObject‘s member this method checks. This parameter is optional. |
Returns
Type | Description |
---|---|
Boolean | true, if the specified user can write the specified object or its member; otherwise, false. |
Remarks
Important
This overload of the CanWriteByUser
method may reduce performance and cause incorrect behavior in some usage scenarios. We recommend that you always use the CanWriteByUser
method’s overloads that accept an Object Space as a parameter to check permissions for a specific object.
The following example shows how to use this method.
using DevExpress.ExpressApp;
using DevExpress.ExpressApp.Security;
using DevExpress.Persistent.Base;
using DevExpress.Persistent.BaseImpl.PermissionPolicy;
using System;
// ...
public class CheckWritePermissionController : ObjectViewController<ListView, Contact> {
SecurityStrategy securityStrategy;
protected override void OnActivated() {
base.OnActivated();
securityStrategy = Application.GetSecurityStrategy();
View.CurrentObjectChanged += View_CurrentObjectChanged;
}
private void View_CurrentObjectChanged(object sender, EventArgs e) {
foreach (IPermissionPolicyUser user in ObjectSpace.GetObjects<ApplicationUser>()) {
if (!securityStrategy.CanWriteByUser(user, ViewCurrentObject.Department, nameof(Department.Office))) {
// ...
}
}
}
}