Document finance workflow and security toggle

TrafagSalesExporter/Security/SecurityOptions.cs

@@ -4,6 +4,7 @@ public sealed class SecurityOptions
 {
     public const string SectionName = "Security";
 
+    public bool Enabled { get; set; } = true;
     public bool DevelopmentBypass { get; set; }
     public bool DevelopmentUserIsAdmin { get; set; }
     public string DevelopmentUserName { get; set; } = "DEV\\TrafagDeveloper";

TrafagSalesExporter/Security/SecurityPolicyFactory.cs

@@ -6,10 +6,18 @@ public static class SecurityPolicyFactory
 {
     public static AuthorizationPolicy BuildAccessPolicy(SecurityOptions settings, bool useDevelopmentAuthentication)
     {
+        if (!settings.Enabled)
+        {
+            return new AuthorizationPolicyBuilder()
+                .RequireAssertion(_ => true)
+                .Build();
+        }
+
         var builder = new AuthorizationPolicyBuilder()
             .RequireAuthenticatedUser();
 
-        if (!useDevelopmentAuthentication && settings.AccessGroups.Count > 0)
+        if (!useDevelopmentAuthentication &&
+            settings.AccessGroups.Count > 0)
         {
             builder.RequireAssertion(context =>
                 settings.AccessGroups.Any(group => context.User.IsInRole(group)));
@@ -20,6 +28,13 @@ public static class SecurityPolicyFactory
 
     public static AuthorizationPolicy BuildAdminPolicy(SecurityOptions settings, bool useDevelopmentAuthentication)
     {
+        if (!settings.Enabled)
+        {
+            return new AuthorizationPolicyBuilder()
+                .RequireAssertion(_ => true)
+                .Build();
+        }
+
         var builder = new AuthorizationPolicyBuilder()
             .RequireAuthenticatedUser();