ICertificateSecurityService¶

ICertificateSecurityService declares the per-entity certificate authorization contract (edit/delete/add/renew/resend permissions and modification cutoffs); it is implemented in SAIF.Services.Policies.Certificates.CertificateSecurityService — see Security and authorization and data-level authorization finding DLA-CORE-03.

Purpose¶

Declares CertificateCanBeEdited/Deleted/Added/Renewed/Resent and CertificateOtherCoveragesCanBeMaintained permission checks.
Declares GetCertificateModificationCutoff and the CanCurrentUserAdd/AddOsc/Renew/RenewOsc/ViewOsc/Access family of checks.

Context¶

Namespace: SAIF.Core.Contracts.Policies.Certificates
Kind: Interface
Assembly/package: SAIF.Core (NuGet package SAIF.SAIFCode.Core)

Public members¶

Member	Signature	Purpose
`CertificateCanBeEdited`	`bool CertificateCanBeEdited(CertificateSecurityProperties certificate)`	Handles certificate can be edited, given `certificate`*.
`CertificateCanBeAdded`	`bool CertificateCanBeAdded(CertificateSecurityProperties certificate)`	Handles certificate can be added, given `certificate`*.
`CertificateCanBeResent`	`bool CertificateCanBeResent(CertificateSecurityProperties certificate)`	Handles certificate can be resent, given `certificate`*.
`GetCertificateModificationCutoff`	`DateTime GetCertificateModificationCutoff()`	Returns certificate modification cutoff*.
`CanCurrentUserAddOsc`	`bool CanCurrentUserAddOsc()`	Represents the can current user add osc associated with this ICertificateSecurityService*.
`CanCurrentUserRenewOsc`	`bool CanCurrentUserRenewOsc()`	Represents the can current user renew osc associated with this ICertificateSecurityService*.
`CanCurrentUserAccess`	`bool CanCurrentUserAccess(OtherStatesPolicy policy)`	Represents the can current user access associated with this ICertificateSecurityService*.

Note: Statements marked with * were inferred from code structure, naming conventions, or contextual evidence where direct confirmation was not available in source artifacts. Statements marked with ** could not be confirmed; treat as unknown until verified.

Sources¶

Core/SAIF.Core/Contracts/Policies/Certificates/ICertificateSecurityService.cs