AFSecurity.CheckSecurity Method (ClaimsIdentity)

public AFSecurityRights CheckSecurity(
	ClaimsIdentity userIdentity
)

// Get the Database
PISystems myPISystems = new PISystems();
PISystem myPISystem = myPISystems.DefaultPISystem;
AFDatabase myDB = myPISystem.Databases.DefaultDatabase;

// Create the Elements
List<AFElement> elements = new List<AFElement>();
AFElement myElement1 = myDB.Elements.Add("MyElement#1");
myElement1.CheckIn();
elements.Add(myElement1);
AFElement myElement2 = myDB.Elements.Add("MyElement#2");
myElement2.CheckIn();
elements.Add(myElement2);

// Obtain the WindowsIdentity of an impersonated user. This
//   can be done with the following code if the current thread
//   has impersonated a user.
//  WindowsIdentity user = WindowsIdentity.GetCurrent();
// Obtain the WindowsIdentity of a different domain user. This
//   can be done with the following code.
//  WindowsIdentity user = new WindowsIdentity("username@domain");
int notFoundCount = 0;
using (WindowsIdentity user = windowsIdentityOfADifferentUser)
{

    // Check Security Rights of a Different User
    AFSecurity security1 = myElement1.Security;
    AFSecurityRights rights = security1.CheckSecurity(user);
    Console.WriteLine("SecurityRights for '{0}': '{1}'", myElement1.Name, rights);
    Console.WriteLine("    CanRead={0}", rights.CanRead());
    Console.WriteLine("    CanWrite={0}", rights.CanWrite());
    Console.WriteLine();

    // Check Security Rights of a Different User in Bulk
    List<AFSecurityRightsToken> tokens = new List<AFSecurityRightsToken>();
    tokens.Add(security1.Token);
    tokens.Add(myElement2.Security.Token);
    IDictionary<Guid, AFSecurityRights> rightsDict = AFSecurity.CheckSecurity(myPISystem, user, tokens);
    foreach (AFElement element in elements)
    {
        if (rightsDict.TryGetValue(element.ID, out rights))
        {
            Console.WriteLine("SecurityRights for '{0}': '{1}'", element.Name, rights);
            Console.WriteLine("    CanRead={0}", rights.CanRead());
            Console.WriteLine("    CanWrite={0}", rights.CanWrite());
            Console.WriteLine();
        }
        else
        {
            notFoundCount++;
        }
    }
}

// Get the Database
PISystems myPISystems = new PISystems();
PISystem myPISystem = myPISystems.DefaultPISystem;
if (myPISystem == null)
    throw new InvalidOperationException("Default PISystem was not found.");
AFDatabase myDB = myPISystem.Databases[dbName];
if (myDB == null)
    throw new InvalidOperationException("Database was not found.");

// Create a search to find all the event frames created from the 'Event'
// template and its 'Level' attribute value is less than 90.
int count;
using (var search = new AFEventFrameSearch(myDB, "FindEventFields", @"Template:'Event' |Level:<90.0"))
{
    search.CacheTimeout = TimeSpan.FromMinutes(10);

    // Do the search
    // 
    // Return event frame security tokens as list and check security for current user.
    count = 0;
    var foundItems4 = search.FindObjectFields("SecurityToken", i => (AFSecurityRightsToken)i[0]);
    Console.WriteLine("Find Object SecurityTokens and Check Security:");
    foreach (var tokenList in foundItems4.ChunkedBy(500))
    {
        // Check Security using Windows Identity.
        var rights = AFSecurity.CheckSecurity(myPISystem, WindowsIdentity.GetCurrent(), tokenList);
        foreach (var rightsItem in rights)
        {
            Console.WriteLine($"  Security Rights for '{myPISystem.CurrentUserName}': {rightsItem.Key} = {rightsItem.Value}");
        }

        // Check Security using Identities.
        rights = AFSecurity.CheckSecurity(myPISystem, myPISystem.CurrentUserIdentities, tokenList, myPISystem.CurrentUserName);
        foreach (var rightsItem in rights)
        {
            Console.WriteLine($"  Security Rights for '{myPISystem.CurrentUserIdentityString}': {rightsItem.Key} = {rightsItem.Value}");
        }
        count += tokenList.Count;
    }
    Console.WriteLine("Found {0} EventFrames.", count);
}