Index: PostgreSqlDotnetCore/Controllers/BlogController.cs
===================================================================
--- PostgreSqlDotnetCore/Controllers/BlogController.cs	(revision 72b1da27c6dadc5f1ae45e91e7c4f60289917575)
+++ PostgreSqlDotnetCore/Controllers/BlogController.cs	(revision 118e414d91bed6d2f18476304a58e95728403f8c)
@@ -13,5 +13,5 @@
 
         {
-            
+
         }
 
@@ -49,30 +49,33 @@
          }*/
 
-          public async Task<ActionResult> Index()
-          {
-              // Проверка за автентикација
-              bool isAuthenticated = User.Identity.IsAuthenticated;
-
-              if (!isAuthenticated)
-              {
-                  return RedirectToAction("AccessDenied", "Error");
-              }
-
-              // Список на блог постови
-              var blogPosts = await db.BlogPostControllerObj.ToListAsync();
-
-              // Вземи тековниот корисник
-              var currentUser = await _userManager.GetUserAsync(User);
-              var customerClass = await db.CustomerObj.SingleOrDefaultAsync(x => x.email == currentUser.Email);
-
-              // Предавање на ViewBag за проверка на автентикација и корисничкиот ID
-              ViewBag.isAuthenticated = isAuthenticated;
-              ViewBag.CurrentUserId = customerClass?.id;
-
-              return View(blogPosts);
-          }
-        
-
-        
+        public async Task<ActionResult> Index()
+        {
+            // Проверка за автентикација
+            bool isAuthenticated = User.Identity.IsAuthenticated;
+
+            if (!isAuthenticated)
+            {
+                return RedirectToAction("AccessDenied", "Error");
+            }
+
+            // Список на блог постови
+            var blogPosts = await db.BlogPostControllerObj.ToListAsync();
+
+            // Вземи тековниот корисник
+            var currentUser = await _userManager.GetUserAsync(User);
+            var customerClass = await db.CustomerObj.SingleOrDefaultAsync(x => x.email == currentUser.Email);
+
+            // Предавање на ViewBag за проверка на автентикација и корисничкиот ID
+            ViewBag.isAuthenticated = isAuthenticated;
+            // no access for standard user
+            ViewBag.OnlyAdminManager = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
+
+            ViewBag.CurrentUserId = customerClass?.id;
+
+            return View(blogPosts);
+        }
+
+
+
 
 
@@ -121,4 +124,6 @@
             // set if is authenticated
             ViewBag.isAuthenticated = customerClass;
+            ViewBag.OnlyAdminManager = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
+
             return View();
         }
@@ -197,4 +202,7 @@
                 }
             }
+            // no access for standard user
+            ViewBag.OnlyAdminManager = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
+
 
             return View(blogClass);
@@ -217,5 +225,5 @@
          }*/
 
-        
+
         public async Task<ActionResult> EditAsync(int id, [Bind(include: "id,date_askes,title,description")] BlogPostConsultation blogClass)
         {
@@ -239,19 +247,20 @@
 
         // GET: Customer/Delete/5
-        public async Task<ActionResult> DeleteAsync(int? id) { 
-          //  UsersClass customerClass = await checkAuthorizationAsync();
-
-        ViewBag.isAuthenticated = await getCrrentUser();
-        
+        public async Task<ActionResult> DeleteAsync(int? id)
+        {
+            //  UsersClass customerClass = await checkAuthorizationAsync();
+
+            ViewBag.isAuthenticated = await getCrrentUser();
+
             if (id == null)
-           {
-               return View(null);
-              //return new HttpStatusCodeResult(HttpStatusCode.BadRequest);
-            }
-           BlogPostConsultation blogClass = db.BlogPostControllerObj.Find(id);
+            {
+                return View(null);
+                //return new HttpStatusCodeResult(HttpStatusCode.BadRequest);
+            }
+            BlogPostConsultation blogClass = db.BlogPostControllerObj.Find(id);
             if (blogClass == null)
             {
                 return View(null);
-               //return HttpNotFound();
+                //return HttpNotFound();
             }
             // check for permission
@@ -271,9 +280,12 @@
                 }
             }
+            // no access for standard user
+            ViewBag.OnlyAdminManager = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
+
             return View(blogClass);
         }
 
         // POST: Customer/Delete/5
-     
+
 
         [HttpPost, ActionName("Delete")]
