MasLazu.AspNet.Authorization.Core.Abstraction 1.0.0-preview.7

MasLazu.AspNet.Authorization.Core.Abstraction

This project provides the abstraction layer for the MasLazu ASP.NET Authorization Core system. It defines interfaces, data transfer objects (DTOs), and request models for managing authorization entities such as actions, permissions, resources, and their relationships.

Overview

The abstraction layer serves as the contract between the application's business logic and the underlying implementation. It ensures loose coupling and allows for different implementations (e.g., in-memory, database-backed) while maintaining a consistent API.

Key Components

Services

The project defines five main service interfaces, each inheriting from ICrudService<TDto, TCreateRequest, TUpdateRequest>:

1. IActionService - Manages actions (operations that can be performed)
2. IPermissionService - Manages permissions (specific allowances)
3. IPermissionTypeService - Manages permission types (categories of permissions)
4. IResourceService - Manages resources (entities that actions can be performed on)
5. IResourceActionService - Manages resource-action mappings

Data Transfer Objects (DTOs)

Each service has a corresponding DTO that represents the data structure:

• ActionDto - Contains action details (Id, Code, Name, timestamps)
• PermissionDto - Contains permission details (Id, Code, Name, Description, TypeCode, timestamps)
• PermissionTypeDto - Contains permission type details (Id, Code, Description, timestamps)
• ResourceDto - Contains resource details (Id, Code, Name, timestamps)
• ResourceActionDto - Contains resource-action mapping details (Id, PermissionCode, ResourceCode, ActionCode, timestamps)

Request Models

For create and update operations, the project defines request models:

• Create*Request - For creating new entities
• Update*Request - For updating existing entities (inherits from BaseUpdateRequest)

All request models use optional properties for updates, allowing partial updates.

Dependencies

This project depends on:

• MasLazu.AspNet.Framework.Application - Provides base classes like BaseDto, BaseUpdateRequest, and ICrudService

Usage

Implement the service interfaces in your concrete implementation projects (e.g., Domain, EfCore) to provide the actual business logic and data access.

Example implementation structure:

MasLazu.AspNet.Authorization.Core.Abstraction (contracts)
├── MasLazu.AspNet.Authorization.Core.Domain (business logic)
├── MasLazu.AspNet.Authorization.Core.EfCore (data access)
└── MasLazu.AspNet.Authorization.Core (service registrations)

Entities Relationship

The authorization system manages the following relationships:

• Actions represent operations (e.g., "read", "write", "delete")
• Resources represent entities (e.g., "user", "post", "comment")
• Permission Types categorize permissions (e.g., "system", "user-defined")
• Permissions are specific allowances with a type
• Resource Actions link permissions to specific resource-action combinations

This structure allows for flexible permission management where permissions can be granted for specific actions on specific resources.