Changeset 118e414 for PostgreSqlDotnetCore/Controllers/CustomerController.cs

Timestamp:

08/23/24 15:40:14 (2 months ago)

Author:

ElenaMoskova <elena.moskova99@…>

Branches:

main

Children:

e9bb9d1

Parents:

72b1da2

Message:

fix access

implement multiple access pages with different roles
optimize present three structure of BlogPost and Answer

File:

• PostgreSqlDotnetCore/Controllers/CustomerController.cs (modified) (8 diffs)

PostgreSqlDotnetCore/Controllers/CustomerController.cs

@@ -19 +19 @@
         public async Task<ActionResult> IndexAsync()
         {
-            UsersClass customerClass = await getCrrentUser();
+           UsersClass customerClass = await getCrrentUser();
+           
+            ViewBag.isAuthenticated = User.Identity.IsAuthenticated;
+            ViewBag.CanCreate = customerClass.role_id == RoleConstants.Admin || customerClass.role_id == RoleConstants.Manager;
+            // no access for standard user
+            ViewBag.OnlyAdminManager = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
+
             if (customerClass == null)
             {
@@ -41 +47 @@
                 return View(db.CustomerObj.ToList());
             }
-          
+
+
         }
 
@@ -57 +64 @@
             // check for permission
             UsersClass customerClass = await getCrrentUser();
+            ViewBag.isAuthenticated = customerClass;
             if (customerClass == null)
             {
@@ -67 +75 @@
                 return RedirectToAction("NotExist", "Error");
             }
+            // no access for standard user
+            ViewBag.OnlyAdminManager = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
+
             return View(customerClass);
         }
@@ -73 +84 @@
         public async Task<ActionResult> CreateAsync()
         {
+            //ViewBag.CanCreate = customerClass.role_id == RoleConstants.Admin || customerClass.role_id == RoleConstants.Manager;
+
             // check for permission
-            UsersClass customerClass = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin);
-            if (customerClass == null)
-            {
-                return RedirectToAction("AccessDenied", "Error");
-            }
+            UsersClass customerClass = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
+            //dodano na 23.08
+            ViewBag.isAuthenticated = await getCrrentUser();
+            if (customerClass == null)
+            {
+                return RedirectToAction("AccessDenied", "Error");
+            }
+            // no access for standard user
+            ViewBag.OnlyAdminManager = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
+
 
             return View();
@@ -125 +143 @@
 
             customerClass = db.CustomerObj.Find(id);
+            ViewBag.isAuthenticated = await getCrrentUser();
             if (customerClass == null)
             {
@@ -130 +149 @@
                 //return HttpNotFound();
             }
+            // no access for standard user
+            ViewBag.OnlyAdminManager = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
+
             return View(customerClass);
         }
@@ -159 +181 @@
             }
             UsersClass customerClass = await getCrrentUser();
-            if (customerClass == null)
-            {
-                return RedirectToAction("AccessDenied", "Error");
-            }
+            ViewBag.isAuthenticated = await getCrrentUser();
+            if (customerClass == null)
+            {
+                return RedirectToAction("AccessDenied", "Error");
+            }
+            
+            // no access for standard user
+            ViewBag.OnlyAdminManager = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
             return View(customerClass);
         }