Question

我有以下要求:

users should not be able to insert or delete from Orders entities
users are able to update or replace Orders entities

哪一部法典更适合:

config.SetEntitySetAccessRule ("Orders", EntitySetRights.WriteMerge | 
EntitySetRights.WriteReplace);

或

config.SetEntitySetAccessRule ("Orders",  EntitySetRights.AllWrite);

And what is the difference between: EntitySetRights.AllWrite EntitySetRights.All ????

Answer 1

I think this documentation sumarizes it pretty well: http://msdn.microsoft.com/en-us/library/system.data.services.entitysetrights.aspx WriteMerge allows MERGE operations. WriteReplace allows PUT operations. AllWrite allows POST/PUT/MERGE/DELETE but doesn t allow any GET. All allows everything. Looking it your requirements you need at least AllWrite, if you also want to allow querying you would need to add either ReadSingle or ReadMultiple or both (in which case All is easier).

友情链接