Add access levels (#19)

- Remove authorization level

src/MyWebLog.Domain/DataTypes.fs

@@ -436,8 +436,8 @@ type WebLogUser =
         /// The URL of the user's personal site
         url : string option
 
-        /// The user's authorization level
-        authorizationLevel : AuthorizationLevel
+        /// The user's access level
+        accessLevel : AccessLevel
     }
 
 /// Functions to support web log users
@@ -445,16 +445,16 @@ module WebLogUser =
     
     /// An empty web log user
     let empty =
-        { id                 = WebLogUserId.empty
-          webLogId           = WebLogId.empty
-          userName           = ""
-          firstName          = ""
-          lastName           = ""
-          preferredName      = ""
-          passwordHash       = ""
-          salt               = Guid.Empty
-          url                = None
-          authorizationLevel = User
+        { id            = WebLogUserId.empty
+          webLogId      = WebLogId.empty
+          userName      = ""
+          firstName     = ""
+          lastName      = ""
+          preferredName = ""
+          passwordHash  = ""
+          salt          = Guid.Empty
+          url           = None
+          accessLevel   = Author
         }
     
     /// Get the user's displayed name
@@ -463,3 +463,7 @@ module WebLogUser =
             seq { match user.preferredName with "" -> user.firstName | n -> n; " "; user.lastName }
             |> Seq.reduce (+)
         name.Trim ()
+    
+    /// Does a user have the required access level?
+    let hasAccess level user =
+        AccessLevel.hasAccess level user.accessLevel

src/MyWebLog.Domain/SupportTypes.fs

@@ -12,6 +12,51 @@ module private Helpers =
         Convert.ToBase64String(Guid.NewGuid().ToByteArray()).Replace('/', '_').Replace('+', '-').Substring (0, 22)
 
 
+/// A user's access level
+type AccessLevel =
+    /// The user may create and publish posts and edit the ones they have created
+    | Author
+    /// The user may edit posts they did not create, but may not delete them
+    | Editor
+    /// The user may delete posts and configure web log settings
+    | WebLogAdmin
+    /// The user may manage themes (which affects all web logs for an installation)
+    | Administrator
+
+/// Functions to support access levels
+module AccessLevel =
+    
+    /// Weightings for access levels
+    let private weights =
+        [ Author,        10
+          Editor,        20
+          WebLogAdmin,   30
+          Administrator, 40
+        ]
+        |> Map.ofList
+    
+    /// Convert an access level to its string representation
+    let toString =
+        function
+        | Author        -> "Author"
+        | Editor        -> "Editor"
+        | WebLogAdmin   -> "WebLogAdmin"
+        | Administrator -> "Administrator"
+    
+    /// Parse an access level from its string representation
+    let parse it =
+        match it with
+        | "Author"        -> Author
+        | "Editor"        -> Editor
+        | "WebLogAdmin"   -> WebLogAdmin
+        | "Administrator" -> Administrator
+        | _               -> invalidOp $"{it} is not a valid access level"
+    
+    /// Does a given access level allow an action that requires a certain access level?
+    let hasAccess needed held =
+        weights[needed] <= weights[held]
+
+
 /// An identifier for a category
 type CategoryId = CategoryId of string
 
@@ -607,26 +652,6 @@ module WebLogId =
     let create () = WebLogId (newId ())
 
 
-/// A level of authorization for a given web log
-type AuthorizationLevel =
-    /// <summary>The user may administer all aspects of a web log</summary>
-    | Administrator
-    /// <summary>The user is a known user of a web log</summary>
-    | User
-
-/// Functions to support authorization levels 
-module AuthorizationLevel =
-    
-    /// Convert an authorization level to a string
-    let toString = function Administrator -> "Administrator" | User -> "User"
-    
-    /// Parse a string into an authorization level
-    let parse value =
-        match value with
-        | "Administrator" -> Administrator
-        | "User"          -> User
-        | it              -> invalidOp $"{it} is not a valid authorization level"
-
 
 /// An identifier for a web log user
 type WebLogUserId = WebLogUserId of string