Index: PostgreSqlDotnetCore/Controllers/CustomerController.cs
===================================================================
--- PostgreSqlDotnetCore/Controllers/CustomerController.cs	(revision 784b3ad6420c8fa9640b0729b33503c54890a454)
+++ PostgreSqlDotnetCore/Controllers/CustomerController.cs	(revision 118e414d91bed6d2f18476304a58e95728403f8c)
@@ -19,5 +19,11 @@
         public async Task<ActionResult> IndexAsync()
         {
-            UsersClass customerClass = await getCrrentUser();
+           UsersClass customerClass = await getCrrentUser();
+           
+            ViewBag.isAuthenticated = User.Identity.IsAuthenticated;
+            ViewBag.CanCreate = customerClass.role_id == RoleConstants.Admin || customerClass.role_id == RoleConstants.Manager;
+            // no access for standard user
+            ViewBag.OnlyAdminManager = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
+
             if (customerClass == null)
             {
@@ -41,5 +47,6 @@
                 return View(db.CustomerObj.ToList());
             }
-          
+
+
         }
 
@@ -57,4 +64,5 @@
             // check for permission
             UsersClass customerClass = await getCrrentUser();
+            ViewBag.isAuthenticated = customerClass;
             if (customerClass == null)
             {
@@ -67,4 +75,7 @@
                 return RedirectToAction("NotExist", "Error");
             }
+            // no access for standard user
+            ViewBag.OnlyAdminManager = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
+
             return View(customerClass);
         }
@@ -73,10 +84,17 @@
         public async Task<ActionResult> CreateAsync()
         {
+            //ViewBag.CanCreate = customerClass.role_id == RoleConstants.Admin || customerClass.role_id == RoleConstants.Manager;
+
             // check for permission
-            UsersClass customerClass = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin);
-            if (customerClass == null)
-            {
-                return RedirectToAction("AccessDenied", "Error");
-            }
+            UsersClass customerClass = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
+            //dodano na 23.08
+            ViewBag.isAuthenticated = await getCrrentUser();
+            if (customerClass == null)
+            {
+                return RedirectToAction("AccessDenied", "Error");
+            }
+            // no access for standard user
+            ViewBag.OnlyAdminManager = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
+
 
             return View();
@@ -125,4 +143,5 @@
 
             customerClass = db.CustomerObj.Find(id);
+            ViewBag.isAuthenticated = await getCrrentUser();
             if (customerClass == null)
             {
@@ -130,4 +149,7 @@
                 //return HttpNotFound();
             }
+            // no access for standard user
+            ViewBag.OnlyAdminManager = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
+
             return View(customerClass);
         }
@@ -159,8 +181,12 @@
             }
             UsersClass customerClass = await getCrrentUser();
-            if (customerClass == null)
-            {
-                return RedirectToAction("AccessDenied", "Error");
-            }
+            ViewBag.isAuthenticated = await getCrrentUser();
+            if (customerClass == null)
+            {
+                return RedirectToAction("AccessDenied", "Error");
+            }
+            
+            // no access for standard user
+            ViewBag.OnlyAdminManager = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
             return View(customerClass);
         }
