implement optional Security parameter for TabPanel #797

Oqtane.Client/Modules/Controls/TabPanel.razor

@@ -27,6 +27,9 @@ else
     [Parameter]
     public string Heading { get; set; } // optional - defaults to name if not specified
 
+    [Parameter]
+    public SecurityAccessLevel? Security { get; set; } // optional - can be used to specify SecurityAccessLevel
+
     protected override void OnInitialized()
     {
         base.OnInitialized();

Oqtane.Client/Modules/Controls/TabStrip.razor

@@ -6,6 +6,8 @@
         <div class="form-group">
             <ul class="nav nav-tabs" role="tablist">
                 @foreach (TabPanel tabPanel in _tabPanels)
+                {
+                    @if (IsAuthorized(tabPanel))
                     {
                         <li class="nav-item">
                             @if (tabPanel.Name == ActiveTab)
@@ -22,6 +24,7 @@
                             }
                         </li>
                     }
+                }
             </ul>
             <div class="tab-content">
                 <br />
@@ -57,4 +60,31 @@
         }
         StateHasChanged();
     }
+
+    private bool IsAuthorized(TabPanel tabPanel)
+    {
+        var authorized = false;
+        switch (tabPanel.Security)
+        {
+            case null: // security not specified - assume SecurityAccessLevel.Anonymous
+                authorized = true;
+                break;
+            case SecurityAccessLevel.Anonymous:
+                authorized = true;
+                break;
+            case SecurityAccessLevel.View:
+                authorized = UserSecurity.IsAuthorized(PageState.User, PermissionNames.View, ModuleState.Permissions);
+                break;
+            case SecurityAccessLevel.Edit:
+                authorized = UserSecurity.IsAuthorized(PageState.User, PermissionNames.Edit, ModuleState.Permissions);
+                break;
+            case SecurityAccessLevel.Admin:
+                authorized = UserSecurity.IsAuthorized(PageState.User, RoleNames.Admin);
+                break;
+            case SecurityAccessLevel.Host:
+                authorized = UserSecurity.IsAuthorized(PageState.User, RoleNames.Host);
+                break;
+        }
+        return authorized;
+    }
 }