---
title: ImageMovePopup
summary: API reference for ImageMovePopup.
status: draft
owner: <owner>
last_reviewed: 2026-08-21
library: SAIF.Presentation.Web.Controls.PopUps.Infragistics111
reference_type: package
---

# ImageMovePopup

`ImageMovePopup` is the only control in this library that embeds authorization logic: it validates a Claim or Policy context number, masks the worker's/claimant's name for claims the caller cannot view under AD-group-based rules, and optionally captures a notify task, before confirming an image-move request to the hosting page ([OP-3](../../operations/image-move-popup-context-validation-and-security-check.md), [security and authorization](../../security-authorization.md)). Its `CheckImageSecurity` and `CheckClaimSecurity` methods are also exposed as a public authorization surface that callers outside this control's own UI flow may invoke directly.

## Purpose
- Resolve a Claim or Policy context number and display the associated worker/policy name, masking claim worker names the caller is not authorized to view ([BR-IMG-001](../../business-rules.md#br-img-001-claim-context-lookup-blocks-the-worker's-name-for-confidential-claims-the-caller-cannot-view)).
- Enforce composite AD-resource-based claim security across 4 classification flags (conflict, exposure, health, hostile-worker) ([BR-IMG-002](../../business-rules.md#br-img-002-conflict-claim-visibility-requires-the-conflictclaim-(adsg_claim_conflict)-ad-resource), [BR-IMG-003](../../business-rules.md#br-img-003-exposure-claim%2C-collateral-health%2C-and-hostile-worker-claim-visibility-each-require-a-distinct-ad-resource)).
- Gate the entire claim-security check set behind the caller's AD domain ([BR-IMG-004](../../business-rules.md#br-img-004-claim-security-checks-are-enforced-only-for-the-saif-domain%3B-non-saif-callers-are-denied-outright)).
- Determine whether a Mail ID may access an imaged document — via a fixed system-mailbox allow-list, a cached self-check, or a delegated live check for other Mail IDs ([BR-IMG-005](../../business-rules.md#br-img-005-certain-system-mailboxes-are-always-allowed-to-receive-image-alerts), [BR-IMG-006](../../business-rules.md#br-img-006-image-access-for-the-current-user-vs.-a-delegated-mail-id-uses-different-authorization-sources)).
- Validate an optional notify/task entry alongside the image-move context ([BR-POPUP-003](../../business-rules.md#br-popup-003-notify-entry-requires-a-notify-id%2C-a-valid-notify-date%2C-and-the-date-must-not-precede-today)).

## Context
- Namespace: `SAIF.Presentation.Web.Controls.PopUps`
- Assembly/package: `SAIF.Presentation.Web.Controls.PopUps.Infragistics111` (package)

## Public members
| Member | Signature | Purpose |
| --- | --- | --- |
| `Active` | `Public Property Active() As Boolean` | Toggles whether the popup renders markup |
| `ControlWithFocus` | `Public Property ControlWithFocus() As String` | Identifies which child control receives client-side focus on render |
| `ErrorMsg` | `Public Property ErrorMsg() As String` | Holds a validation/authorization error message displayed on the popup |
| `ImageFileCode` | `Public Property ImageFileCode() As String` | Selects the context type (`"CLAIM"` triggers claim lookup/security; any other value is treated as a policy context) |
| `TitleText` | `Public Property TitleText() As String` | Sets the popup's title-bar label text |
| `Top` | `Public Property Top() As Integer` | Vertical pixel offset for popup positioning |
| `Left` | `Public Property Left() As Integer` | Horizontal pixel offset for popup positioning |
| `ConfirmAction` | `Public Event ConfirmAction(ByVal Confirm As Boolean, ByVal e As ImageMoveEventArgs)` | Raised on Save (`Confirm = True`, only after `EditContext()` and `EditAlertControls()` both succeed) or Cancel (`Confirm = False`) |
| `ImageMoveEventArgs` (nested type) | `Public Class ImageMoveEventArgs` — constructor `New(inContextNum As String, inNotifyID As String, inNotifyDate As Date, inNotifyText As String)` with read-only `ContextNum`, `NotifyID`, `NotifyDate`, `NotifyText` | Immutable payload delivered with `ConfirmAction`, carrying the validated context and notify-task values |
| `ResetControls` | `Public Sub ResetControls()` | Resets popup fields, typically called after Cancel |
| `CheckImageSecurity` | `Public Function CheckImageSecurity(ByVal inImageFileCode As String, ByVal inMailId As String) As Boolean` | Determines whether image access is granted for a target Mail ID — `True` unconditionally for a fixed system-mailbox allow-list, the cached `HasImage` flag for the current caller, or a live delegated check (`ImageServices.HasADAccessToImageResource`) for any other Mail ID ([BR-IMG-005](../../business-rules.md#br-img-005-certain-system-mailboxes-are-always-allowed-to-receive-image-alerts), [BR-IMG-006](../../business-rules.md#br-img-006-image-access-for-the-current-user-vs.-a-delegated-mail-id-uses-different-authorization-sources)) |
| `CheckClaimSecurity` | `Public Sub CheckClaimSecurity(ByVal inClaimSecurity As clsClaimData.strClaimSecurity, ByVal inMailId As String, ByRef outAllowAccess As Boolean, ByRef outError As String)` | Evaluates the claim's 4 security-classification flags against the corresponding AD resources for the current caller or a target Mail ID, denying outright for non-`"SAIF"`-domain callers ([BR-IMG-002](../../business-rules.md#br-img-002-conflict-claim-visibility-requires-the-conflictclaim-(adsg_claim_conflict)-ad-resource), [BR-IMG-003](../../business-rules.md#br-img-003-exposure-claim%2C-collateral-health%2C-and-hostile-worker-claim-visibility-each-require-a-distinct-ad-resource), [BR-IMG-004](../../business-rules.md#br-img-004-claim-security-checks-are-enforced-only-for-the-saif-domain%3B-non-saif-callers-are-denied-outright)) |

## Behavioral notes
- `SetSecurityUserImage()` populates a cached `ImageSecurity` structure of 7 AD-resource flags from `clsSecurityPrincipal.IsAuthorized(...)`, but only the `ADSG_IMAGE`-derived `HasImage` flag is subsequently read by `CheckImageSecurity`; the other 5 cached flags are not observed to gate any code path in this library**.
- The external caller(s) of the public `CheckImageSecurity` method, and whether any caller ever invokes `CheckClaimSecurity` with a non-empty `inMailId` (exercising the delegated/target-Mail-ID path), were not identified from this library's own source**.
- When claim access is denied, `EditContext()` sets the UI-bound `ErrorMsg` to the generic `MSG_WAR_NO_CLAIM` rather than the more specific `MSG_NOT_AUTH_CLAIM`/`LastError` value returned by `CheckClaimSecurity` — whether this is intentional is unconfirmed*.

## Constraints and usage notes
- Callers invoking `CheckClaimSecurity`/`CheckImageSecurity` directly should be aware both methods depend on `SAIF.Framework.Security.clsSecurityPrincipal`/`clsAccountMaintProxy`, which route to the centralized SAIF AD security infrastructure defined in the referenced `SAIF.BOF.Framework.Security` package*.

> **Note:** Statements marked with `*` were inferred from code structure, naming
> conventions, or contextual evidence where direct confirmation was not available
> in source artifacts. Statements marked with `**` could not be confirmed; treat
> as unknown until verified.

## Sources
- `SAIF.Presentation.Web.Controls.PopUps.Infragistics111\ImageMovePopup.vb`
- `SAIF.Presentation.Web.Controls.PopUps.Infragistics111\ImageMovePopup.ascx`