Interface IAuthRuleBuilderOperationNamedAndScoped
public interface IAuthRuleBuilderOperationNamedAndScoped
-
Method Summary
Modifier and TypeMethodDescriptionResponses for this operation will not be checkedResponses for this operation will not be checked and access to all resources is allowed.Responses for this operation must be authorized by other rules.
-
Method Details
-
andAllowAllResponses
Responses for this operation will not be checked -
andAllowAllResponsesWithAllResourcesAccess
Responses for this operation will not be checked and access to all resources is allowed. This is intended for operations which are known to fetch a graph of resources that is known to be safe, such as `$everything` which may access and fetch resources outside the patient's compartment but enforces safety in what it fetches via strict SQL queries. -
andRequireExplicitResponseAuthorization
Responses for this operation must be authorized by other rules. For example, if this rule is authorizing the Patient $everything operation, there must be a separate rule (or rules) that actually authorize the user to read the resources being returned
-