aspnet/Security — pull request #103 by HaoK (2014-12-03 00:55:57+00:00)
Title: Initial set of Authorization changes

First pass at implementing proposed Authorization changes with some tweaks:
- Renamed AuthorizationPolicyOptions -> AuthorizationOptions with Policies property
- Deleted old implementation, kept the basic tests, removed the old Policy/retry stuff

Issues:
- Without the Before/After hooks, do we still need to separate IAuthorizationService and IAuthorizationPolicyHandler, collapse for now?

- Nothing is consuming the policy options right now, do we need an AuthorizationManager that Authorize attribute would use to do the more friendly Authorize via policyName (instead of via policy instance)?

- AuthorizationContext.Authorized isn't really useful if we immediately stop the logic if any handler fails to authorize. Should we invoke all handlers letting them change the Authorized state even if previous handlers failed to authorize? (this is would give the handler interface a reason to exist)

cc @loudej @yishaigalatzer @rynowak @blowdart @divega