mayViewProtected method

Future<bool> mayViewProtected(
  1. String model,
  2. Object? viewer,
  3. Object? record
)

Whether viewer may see record's protected fields: its @DVModel.sensitiveField()s and the fields naming its privacy subject.

Only a registered <model>.viewSensitive policy that admits viewer says yes. A model's view policy does not: letting anybody read an article is not letting anybody read its editor's notes.

Implementation

Future<bool> mayViewProtected(
  String model,
  Object? viewer,
  Object? record,
) async {
  final String action = '$model.viewSensitive';
  if (!_registered(action)) return false;
  return _ask(action, viewer, record);
}