Experiments/Attic/Security/Castle.Services.Security/DenyPolicy.cs

   1 // Copyright 2004-2008 Castle Project - http://www.castleproject.org/
   2 //
   3 // Licensed under the Apache License, Version 2.0 (the "License");
   4 // you may not use this file except in compliance with the License.
   5 // You may obtain a copy of the License at
   6 //
   7 //     http://www.apache.org/licenses/LICENSE-2.0
   8 //
   9 // Unless required by applicable law or agreed to in writing, software
  10 // distributed under the License is distributed on an "AS IS" BASIS,
  11 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  12 // See the License for the specific language governing permissions and
  13 // limitations under the License.
  14
  15 namespace Castle.Services.Security
  16 {
  17     using System;
  18     using System.Security.Principal;
  19
  20     /// <summary>
  21         /// Summary description for DenyPolicy.
  22         /// </summary>
  23         public class DenyPolicy : IPolicy
  24         {
  25         String[] _roles;
  26         IPrincipal _principal;
  27
  28         public DenyPolicy(String[] roles, IPrincipal principal)
  29         {
  30             this._roles = roles;
  31             this._principal = principal;
  32         }
  33
  34         #region IPolicy Members
  35
  36         public bool Evaluate()
  37         {
  38             bool result = true;
  39             foreach(String role in this._roles)
  40             {
  41                 if(this._principal.IsInRole(role))
  42                 {
  43                     result = false;
  44                     break;
  45                 }
  46             }
  47             return result;
  48         }
  49
  50         #endregion
  51     }
  52 }