Remove ASP.NET Authorization usage (#167)

Author: albi005

StartSch/AuthSchSetup.cs

@@ -100,19 +100,7 @@ else
                                             </a>
                                         </h3>
 
-                                        @if (opening.Id != 0)
-                                        {
-                                            <AuthorizeView Policy="Write" Resource="@opening">
-                                                <div class="icon-buttons">
-                                                    <a title="Új poszt"
-                                                       href="/posts/0/edit?categories=@string.Join(',', opening.Categories.Select(g => g.Page.Id))&event=@opening.Id">
-                                                        <md-icon>
-                                                            chat_add_on
-                                                        </md-icon>
-                                                    </a>
-                                                </div>
-                                            </AuthorizeView>
-                                        }
+                                        <AdminButtonsForEvent Event="@opening" />
                                     </div>
 
                                     <div style="display: flex; align-items: center; flex-wrap: wrap; gap: 8px">
@@ -210,6 +198,7 @@ else
     protected override async Task OnInitializedAsync()
     {
         Instant currentInstant = SystemClock.Instance.GetCurrentInstant();
+        
         await InterestService.LoadIndex;
 
         await using var tx = await Db.BeginTransaction(IsolationLevel.Snapshot);
@@ -224,7 +213,7 @@ else
         }
 
         IQueryable<Post> postsQuery = Db.Posts
-            .Where(p => p.Published.HasValue)
+            .WhereAnyoneCanRead(currentInstant)
             .OrderByDescending(p => p.Published)
             .ThenByDescending(p => p.Id);
         if (After != null)

StartSch/Authorization/Handlers/EventAdminAccessHandler.cs

@@ -2,7 +2,6 @@
 @using StartSch.Services
 @inherits ResourcePage<Page>
 @inject Db Db
-@inject IAuthorizationService Auth
 @inject InterestService InterestService
 @inject AuthorizationService AuthorizationService
 
@@ -98,12 +97,11 @@
 @code {
     private Page? _page;
     private readonly List<object> _items = [];
+    private readonly Instant currentInstant = SystemClock.Instance.GetCurrentInstant();
     [Parameter] public int PageId { get; set; }
 
     protected override async Task OnInitializedAsync()
     {
-        var isAdminTask = IsAdmin();
-
         await InterestService.LoadIndex;
 
         _page = await Db.Pages.FirstOrDefaultAsync(g => g.Id == PageId);
@@ -122,13 +120,10 @@
         var postIds = postsAndEvents.Where(x => x.PostId != 0).Select(x => x.PostId);
         var eventIds = postsAndEvents.Where(x => x.EventId != 0).Select(x => x.EventId);
 
-        var postsQuery = Db.Posts
+        var posts = await Db.Posts
+            .WhereUserCanRead(currentInstant, AuthorizationService)
             .Include(p => p.PostCategories)
-            .Where(p => postIds.Contains(p.Id));
-        if (!await isAdminTask)
-            postsQuery = postsQuery
-                .Where(p => p.Published.HasValue);
-        var posts = await postsQuery
+            .Where(p => postIds.Contains(p.Id))
             .Include(p => p.Event)
             .OrderBy(p => p.Published.HasValue) // drafts first
             .ThenByDescending(p => p.Published)
@@ -147,15 +142,6 @@
         _items.Sort((a, b) => GetDate(b).CompareTo(GetDate(a)));
     }
 
-    private async Task<bool> IsAdmin()
-    {
-        var adminAuthorization = await Auth.AuthorizeAsync(
-            await User,
-            _page,
-            PageAdminRequirement.Instance);
-        return adminAuthorization.Succeeded;
-    }
-
     private static Instant GetDate(object item) => item switch
     {
         Post post => post.Published ?? post.Created,