IDataSecurityFilterFactory
Namespace: Meshmakers.Octo.Runtime.Contracts.DataPermissions
Builds the caller-specific read filter for a tenant. Returns null for system contexts and for tenants without policies — the dormant guarantee: query shapes and cache keys stay byte-identical to the pre-permission behavior in that case.
public interface IDataSecurityFilterFactory
Methods
CreateAsync(IRuntimeRepository, RtSecurityContext)
Creates the read filter for the caller, or null when nothing must be filtered or audited.
Task<RtDataSecurityQueryFilter> CreateAsync(IRuntimeRepository runtimeRepository, RtSecurityContext securityContext)
Parameters
runtimeRepository IRuntimeRepository
Repository of the tenant
securityContext RtSecurityContext
The caller