IAuthorizationPolicy.Evaluate(EvaluationContext, Object) メソッド

定義

名前空間:

System.IdentityModel.Policy

アセンブリ:

System.ServiceModel.Primitives.dll

パッケージ:

System.ServiceModel.Primitives v6.2.0

ソース:

IAuthorizationPolicy.cs

ユーザーがこの承認ポリシーの要件を満たすかどうかを評価します。

public:
 bool Evaluate(System::IdentityModel::Policy::EvaluationContext ^ evaluationContext, System::Object ^ % state);

public bool Evaluate (System.IdentityModel.Policy.EvaluationContext evaluationContext, ref object state);

abstract member Evaluate : System.IdentityModel.Policy.EvaluationContext * obj -> bool

Public Function Evaluate (evaluationContext As EvaluationContext, ByRef state As Object) As Boolean

パラメーター

evaluationContext

EvaluationContext

承認ポリシーが評価するクレーム セットを格納した EvaluationContext。

state

Object

この承認ポリシーのカスタム状態を表す Object。参照によって渡されます。

戻り値

Boolean

他の承認ポリシーによって evaluationContext にクレームが追加されている場合で、この承認ポリシーに対する Evaluate(EvaluationContext, Object) メソッドを呼び出す必要がある場合は false。それ以外の場合で、この承認ポリシーが追加評価を行う必要がない場合は true。

例

public bool Evaluate(EvaluationContext evaluationContext, ref object state)
{
    bool bRet = false;
    CustomAuthState customstate = null;

    // If state is null, then this method has not been called before, so
    // set up a custom state.
    if (state == null)
    {
        customstate = new CustomAuthState();
        state = customstate;
    }
    else
    {
        customstate = (CustomAuthState)state;
    }

    Console.WriteLine("Inside MyAuthorizationPolicy::Evaluate");

    // If claims have not been added yet...
    if (!customstate.ClaimsAdded)
    {
        // Create an empty list of Claims.
        IList<Claim> claims = new List<Claim>();

        // Iterate through each of the claim sets in the evaluation context.
        foreach (ClaimSet cs in evaluationContext.ClaimSets)
            // Look for Name claims in the current claim set.
            foreach (Claim c in cs.FindClaims(ClaimTypes.Name, Rights.PossessProperty))
                // Get the list of operations the given username is allowed to call.
                foreach (string s in GetAllowedOpList(c.Resource.ToString()))
                {
                    // Add claims to the list.
                    claims.Add(new Claim("http://example.org/claims/allowedoperation", s, Rights.PossessProperty));
                    Console.WriteLine("Claim added {0}", s);
                }

        // Add claims to the evaluation context.
        evaluationContext.AddClaimSet(this, new DefaultClaimSet(this.Issuer,claims));

        // Record that claims have been added.
        customstate.ClaimsAdded = true;

        // Return true, which indicates this need not be called again.
        bRet = true;
    }
    else
    {
        // This point should not be reached, but just in case...
        bRet = true;
    }

    return bRet;
}

Public Function Evaluate(ByVal evaluationContext As EvaluationContext, _
     ByRef state As Object) As Boolean Implements IAuthorizationPolicy.Evaluate

    Dim bRet As Boolean = False
    Dim customstate As CustomAuthState = Nothing

    ' If state is null, then this method has not been called before, so 
    ' set up a custom state.
    If state Is Nothing Then
        customstate = New CustomAuthState()
        state = customstate
    Else
        customstate = CType(state, CustomAuthState)
    End If
    Console.WriteLine("Inside MyAuthorizationPolicy::Evaluate")

    ' If the claims have not been added yet...
    If Not customstate.ClaimsAdded Then
        ' Create an empty list of Claims
        Dim claims As New List(Of Claim)

        ' Iterate through each of the claimsets in the evaluation context.
        Dim cs As ClaimSet
        For Each cs In evaluationContext.ClaimSets
            ' Look for Name claims in the current claim set.
            Dim c As Claim
            For Each c In cs.FindClaims(ClaimTypes.Name, Rights.PossessProperty)
                ' Get the list of operations the given username is allowed to call.
                Dim s As String
                For Each s In GetAllowedOpList(c.Resource.ToString())

                    ' Add claims to the list
                    claims.Add(New Claim("http://example.org/claims/allowedoperation", _
                                s, Rights.PossessProperty))
                    Console.WriteLine("Claim added {0}", s)
                Next s
            Next c
        Next cs 
        
        ' Add claims to the evaluation context.
        evaluationContext.AddClaimSet(Me, New DefaultClaimSet(Me.Issuer, claims))

        ' Record that claims have been added.
        customstate.ClaimsAdded = True

        ' Return true, which indicates the method need not to be called again.
        bRet = True
    Else
        ' Should never get here, but just in case...
        bRet = True
    End If


    Return bRet

End Function 'Evaluate

注釈

注意

IAuthorizationPolicy インターフェイスを実装するときは、Evaluate メソッドが異なるスレッドによって複数回呼び出されることを想定する必要があります。

IAuthorizationPolicy インターフェイスの実装では、state パラメーターを使用して、Evaluate メソッドの呼び出し間の状態を追跡できます。 Evaluate メソッドのある呼び出しの内部で状態オブジェクトが設定されると、現在の評価プロセスの中でそれ以降に Evaluate メソッドが呼び出されるたびに必ず、同じオブジェクト インスタンスが渡されます。