using System.Threading;
using System.Threading.Tasks;
using GB5Shared.DTO.Framework.Login;

namespace GB5Shared.Authorization
{
    public interface IMenuRightsBLL
    {
        /// <summary>
        /// True when login.RoleId is granted <paramref name="operation"/> on <paramref name="menuCode"/>
        /// per MROLEVSMENU. Fails closed: a missing MMENU/MROLEVSMENU seed row denies the request
        /// rather than allowing it, so an unseeded environment cannot accidentally leave a
        /// protected endpoint wide open.
        /// </summary>
        Task<bool> IsAllowedAsync(string menuCode, RightOperation operation, LoginDTO login, CancellationToken ct);
    }
}