minimize diff

Author: ramonsmits

src/ServiceControl.Hosting/Auth/PermissionVerbHandler.cs

@@ -42,7 +42,7 @@ protected override Task HandleRequirementAsync(
         var roles = context.User.FindAll(ClaimTypes.Role).Select(claim => claim.Value).ToArray();
         var permission = requirement.Permission;
 
-        if (IsGranted(roles, permission))
+        if (RolePermissions.IsGranted(roles, permission))
         {
             auditLog.Decision(
                 subjectId,
@@ -71,17 +71,4 @@ protected override Task HandleRequirementAsync(
         // Leave the requirement unmet → the framework forbids (403).
         return Task.CompletedTask;
     }
-
-    static bool IsGranted(string[] roles, string permission)
-    {
-        foreach (var role in roles)
-        {
-            if (RolePermissions.Roles.TryGetValue(role, out var granted) && granted.Contains(permission))
-            {
-                return true;
-            }
-        }
-
-        return false;
-    }
 }

src/ServiceControl.Infrastructure/Auth/RolePermissions.cs

@@ -74,4 +74,17 @@ public static class RolePermissions
         }.ToFrozenDictionary(StringComparer.OrdinalIgnoreCase);
 
     static FrozenSet<string> ToSet(string[] permissions) => permissions.ToFrozenSet(StringComparer.Ordinal);
+
+    public static bool IsGranted(string[] roles, string permission)
+    {
+        foreach (var role in roles)
+        {
+            if (Roles.TryGetValue(role, out var granted) && granted.Contains(permission))
+            {
+                return true;
+            }
+        }
+
+        return false;
+    }
 }