feature: RBAC + Clinical Audit Logging

2026-06-21 15:46:55 +08:00
parent a43db52813
commit 5af6ab490e
83 changed files with 4281 additions and 70 deletions
@@ -0,0 +1,19 @@
+using Microsoft.AspNetCore.Authorization;
+
+public class PermissionAuthorizationHandler : AuthorizationHandler<PermissionRequirement>
+{
+    protected override Task HandleRequirementAsync(
+        AuthorizationHandlerContext context,
+        PermissionRequirement requirement)
+    {
+        var roleClaim = context.User.FindFirst("clinical_role")?.Value;
+        if (roleClaim is null)
+            return Task.CompletedTask;
+
+        var role = ClinicalRoleExtensions.FromDbString(roleClaim);
+        if (ClinicalRolePermissionMap.HasPermission(role, requirement.Permission))
+            context.Succeed(requirement);
+
+        return Task.CompletedTask;
+    }
+}