ImageMovePopup

ImageMovePopup is the only control in this library that embeds authorization logic: it validates a Claim or Policy context number, masks the worker's/claimant's name for claims the caller cannot view under AD-group-based rules, and optionally captures a notify task, before confirming an image-move request to the hosting page (OP-3, security and authorization). Its CheckImageSecurity and CheckClaimSecurity methods are also exposed as a public authorization surface that callers outside this control's own UI flow may invoke directly.

Purpose

• Resolve a Claim or Policy context number and display the associated worker/policy name, masking claim worker names the caller is not authorized to view (BR-IMG-001).
• Enforce composite AD-resource-based claim security across 4 classification flags (conflict, exposure, health, hostile-worker) (BR-IMG-002, BR-IMG-003).
• Gate the entire claim-security check set behind the caller's AD domain (BR-IMG-004).
• Determine whether a Mail ID may access an imaged document — via a fixed system-mailbox allow-list, a cached self-check, or a delegated live check for other Mail IDs (BR-IMG-005, BR-IMG-006).
• Validate an optional notify/task entry alongside the image-move context (BR-POPUP-003).

Context

• Namespace: SAIF.Presentation.Web.Controls.PopUps
• Assembly/package: SAIF.Presentation.Web.Controls.PopUps.Infragistics111 (package)

Public members

Member	Signature	Purpose
Active	Public Property Active() As Boolean	Toggles whether the popup renders markup
ControlWithFocus	Public Property ControlWithFocus() As String	Identifies which child control receives client-side focus on render
ErrorMsg	Public Property ErrorMsg() As String	Holds a validation/authorization error message displayed on the popup
ImageFileCode	Public Property ImageFileCode() As String	Selects the context type ("CLAIM" triggers claim lookup/security; any other value is treated as a policy context)
TitleText	Public Property TitleText() As String	Sets the popup's title-bar label text
Top	Public Property Top() As Integer	Vertical pixel offset for popup positioning
Left	Public Property Left() As Integer	Horizontal pixel offset for popup positioning
ConfirmAction	Public Event ConfirmAction(ByVal Confirm As Boolean, ByVal e As ImageMoveEventArgs)	Raised on Save (Confirm = True, only after EditContext() and EditAlertControls() both succeed) or Cancel (Confirm = False)
ImageMoveEventArgs (nested type)	Public Class ImageMoveEventArgs — constructor New(inContextNum As String, inNotifyID As String, inNotifyDate As Date, inNotifyText As String) with read-only ContextNum, NotifyID, NotifyDate, NotifyText	Immutable payload delivered with ConfirmAction, carrying the validated context and notify-task values
ResetControls	Public Sub ResetControls()	Resets popup fields, typically called after Cancel
CheckImageSecurity	Public Function CheckImageSecurity(ByVal inImageFileCode As String, ByVal inMailId As String) As Boolean	Determines whether image access is granted for a target Mail ID — True unconditionally for a fixed system-mailbox allow-list, the cached HasImage flag for the current caller, or a live delegated check (ImageServices.HasADAccessToImageResource) for any other Mail ID (BR-IMG-005, BR-IMG-006)
CheckClaimSecurity	Public Sub CheckClaimSecurity(ByVal inClaimSecurity As clsClaimData.strClaimSecurity, ByVal inMailId As String, ByRef outAllowAccess As Boolean, ByRef outError As String)	Evaluates the claim's 4 security-classification flags against the corresponding AD resources for the current caller or a target Mail ID, denying outright for non-"SAIF"-domain callers (BR-IMG-002, BR-IMG-003, BR-IMG-004)

Behavioral notes

• SetSecurityUserImage() populates a cached ImageSecurity structure of 7 AD-resource flags from clsSecurityPrincipal.IsAuthorized(...), but only the ADSG_IMAGE-derived HasImage flag is subsequently read by CheckImageSecurity; the other 5 cached flags are not observed to gate any code path in this library**.
• The external caller(s) of the public CheckImageSecurity method, and whether any caller ever invokes CheckClaimSecurity with a non-empty inMailId (exercising the delegated/target-Mail-ID path), were not identified from this library's own source**.
• When claim access is denied, EditContext() sets the UI-bound ErrorMsg to the generic MSG_WAR_NO_CLAIM rather than the more specific MSG_NOT_AUTH_CLAIM/LastError value returned by CheckClaimSecurity — whether this is intentional is unconfirmed*.

Constraints and usage notes

• Callers invoking CheckClaimSecurity/CheckImageSecurity directly should be aware both methods depend on SAIF.Framework.Security.clsSecurityPrincipal/clsAccountMaintProxy, which route to the centralized SAIF AD security infrastructure defined in the referenced SAIF.BOF.Framework.Security package*.

Note: Statements marked with * were inferred from code structure, naming conventions, or contextual evidence where direct confirmation was not available in source artifacts. Statements marked with ** could not be confirmed; treat as unknown until verified.

Sources

• SAIF.Presentation.Web.Controls.PopUps.Infragistics111\ImageMovePopup.vb
• SAIF.Presentation.Web.Controls.PopUps.Infragistics111\ImageMovePopup.ascx