USING: accessors combinators furnace.redirection kernel
namespaces sets ;

IN: furnace.auth

: have-capabilities? ( capabilities -- ? )
realm get secure>> secure-connection? not and
[ drop f ] [
logged-in-user get {
{ [ dup not ] [ 2drop f ] }
{ [ dup deleted>> 1 = ] [ 2drop f ] }
[ capabilities>> subset? ]
} cond
] if ;