2016-10-26 31 views
3

有什么方法可以记录请求所需的权限吗?如果我有注解像swagger - 注解权限?

[Authenticate] 
[RequiredRole("Admin")] 
[RequiredPermission("CanAccess")] 
public object Delete(DeleteAppUser deleteUserRequest) 
{ 
    // .... 
} 
在我的服务类

或者用于我RequestDTOs

[Authenticate] 
[RequiredRole("Admin")] 
[Route("/appusers/{AppUserId}", "DELETE", Summary = "Delete an application user identified by its ID.")] 
public class DeleteAppUser : IReturn<AppUserDto> 
{ 
    // .... 
} 

我可以做出这样招摇的UI文档中莫名其妙地支持我的API的用户自动或做我有把它写在注释中,例如:

[Route("/appusers/{AppUserId}", "DELETE", Summary = "Delete an application user identified by its ID.", Notes="Requires an authenticated session and membership in the Admin role.")] 

回答

2

没有Swaggers UI没有角色或权限的概念。此信息显示在ServiceStack的/metadata pages上,但要将其显示在Swagger的用户界面中,您需要将其添加到API的文本描述中。