---
title: ICertificateSecurityService
summary: API reference for ICertificateSecurityService.
status: draft
owner: SAIF Doc Gen
last_reviewed: 2026-09-24
library: SAIF.SAIFCode.Core
reference_type: package
---

# ICertificateSecurityService

`ICertificateSecurityService` declares the per-entity certificate authorization contract (edit/delete/add/renew/resend permissions and modification cutoffs); it is implemented in `SAIF.Services.Policies.Certificates.CertificateSecurityService` — see [Security and authorization](../../security-authorization.md) and data-level authorization finding [DLA-CORE-03](../../security-authorization.md#data-level-authorization).

## Purpose
- Declares `CertificateCanBeEdited/Deleted/Added/Renewed/Resent` and `CertificateOtherCoveragesCanBeMaintained` permission checks.
- Declares `GetCertificateModificationCutoff` and the `CanCurrentUserAdd/AddOsc/Renew/RenewOsc/ViewOsc/Access` family of checks.

## Context
- Namespace: `SAIF.Core.Contracts.Policies.Certificates`
- Kind: Interface
- Assembly/package: `SAIF.Core` (NuGet package `SAIF.SAIFCode.Core`)

## Public members
| Member | Signature | Purpose |
| --- | --- | --- |
| `CertificateCanBeEdited` | `bool CertificateCanBeEdited(CertificateSecurityProperties certificate)` | Handles certificate can be edited, given `certificate`*. |
| `CertificateCanBeAdded` | `bool CertificateCanBeAdded(CertificateSecurityProperties certificate)` | Handles certificate can be added, given `certificate`*. |
| `CertificateCanBeResent` | `bool CertificateCanBeResent(CertificateSecurityProperties certificate)` | Handles certificate can be resent, given `certificate`*. |
| `GetCertificateModificationCutoff` | `DateTime GetCertificateModificationCutoff()` | Returns certificate modification cutoff*. |
| `CanCurrentUserAddOsc` | `bool CanCurrentUserAddOsc()` | Represents the can current user add osc associated with this ICertificateSecurityService*. |
| `CanCurrentUserRenewOsc` | `bool CanCurrentUserRenewOsc()` | Represents the can current user renew osc associated with this ICertificateSecurityService*. |
| `CanCurrentUserAccess` | `bool CanCurrentUserAccess(OtherStatesPolicy policy)` | Represents the can current user access associated with this ICertificateSecurityService*. |

> **Note:** Statements marked with `*` were inferred from code structure, naming
> conventions, or contextual evidence where direct confirmation was not available
> in source artifacts. Statements marked with `**` could not be confirmed; treat
> as unknown until verified.

## Sources
- Core/SAIF.Core/Contracts/Policies/Certificates/ICertificateSecurityService.cs