Changeset 118e414 for PostgreSqlDotnetCore/Controllers/PetCaresController.cs

Timestamp:

08/23/24 15:40:14 (2 months ago)

Author:

ElenaMoskova <elena.moskova99@…>

Branches:

main

Children:

e9bb9d1

Parents:

72b1da2

Message:

fix access

implement multiple access pages with different roles
optimize present three structure of BlogPost and Answer

File:

• PostgreSqlDotnetCore/Controllers/PetCaresController.cs (modified) (9 diffs)

PostgreSqlDotnetCore/Controllers/PetCaresController.cs

@@ -26 +26 @@
               return View();
           }*/
-         public async Task<ActionResult> Create()
-         {
-             
-             
+        public async Task<ActionResult> Create()
+        {
+
+
             UsersClass customerClass = await getCrrentUser();
-            
+
             ViewBag.isAuthenticated = customerClass;
             var vetCenters = await db.VetCentersObj.ToListAsync();
-             ViewBag.VetCenters = new SelectList(vetCenters, "id", "name");
-
-             return View();
-         }
-
-       
+            ViewBag.VetCenters = new SelectList(vetCenters, "id", "name");
+
+            return View();
+        }
+
+
 
 
@@ -53 +53 @@
                 return RedirectToAction("AccessDenied", "Error");
             }
+            // no access for standard user
+            ViewBag.OnlyAdminManager = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
+
             if (customerClass.role_id == RoleConstants.Standard)
             {
                 // query
-                            var query = from st in db.PetCaresObj
+                var query = from st in db.PetCaresObj
                             where st.usersid == customerClass.id
                             select st;
@@ -72 +75 @@
                 // query
                 var queryVetCenters = from kk in db.VetCentersObj
-                            select kk;
+                                      select kk;
 
                 // query
@@ -85 +88 @@
 
                 return View(petCareAllData);
-            } else
+            }
+            else
             {
                 return View(db.PetCaresObj.ToList());
@@ -99 +103 @@
                 return RedirectToAction("NotExist", "Error");
             }
-            UsersClass customerClass = await getCrrentUser(); 
+            UsersClass customerClass = await getCrrentUser();
             ViewBag.isAuthenticated = customerClass;
             Pet_CaresClass peClass = db.PetCaresObj.Find(id);
@@ -106 +110 @@
                 return RedirectToAction("NotExist", "Error");
             }
+            // no access for standard user
+            ViewBag.OnlyAdminManager = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
+
             return View(peClass);
         }
@@ -126 +133 @@
         [HttpPost]
         [ValidateAntiForgeryToken]
-         public async Task<ActionResult> CreateAsync([Bind(include: "id,title,description,dateending, start_date, usersid, vetcentersid")] Pet_CaresClass peClass)
-          {
-              bool isAuthenticated = User.Identity.IsAuthenticated;
-              if (!isAuthenticated)
-              {
-                  return RedirectToAction("AccessDenied", "Error");
-              }
+        public async Task<ActionResult> CreateAsync([Bind(include: "id,title,description,dateending, start_date, usersid, vetcentersid")] Pet_CaresClass peClass)
+        {
+            bool isAuthenticated = User.Identity.IsAuthenticated;
+            if (!isAuthenticated)
+            {
+                return RedirectToAction("AccessDenied", "Error");
+            }
             ViewBag.isAuthenticated = new UsersClass();
+            // no access for standard user
+            ViewBag.OnlyAdminManager = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
 
             if (ModelState.IsValid)
-              {
+            {
                 ViewBag.isAuthenticated = new UsersClass();
                 peClass.dateending = DateTime.SpecifyKind(peClass.dateending, DateTimeKind.Utc);
-                  peClass.start_date = DateTime.SpecifyKind(peClass.start_date, DateTimeKind.Utc);
-                 var user = await _userManager.GetUserAsync(User);
-                  var customerClass = db.CustomerObj.SingleOrDefault(x => x.email == user.Email);
-                  peClass.usersid = customerClass.id;
-                  db.PetCaresObj.Add(peClass);
-                  db.SaveChanges();
-                  return RedirectToAction("Index");
-              }
-              var vetCenters = await db.VetCentersObj.ToListAsync();
-              ViewBag.VetCenters = new SelectList(vetCenters, "id", "name");
-
-              return View(peClass);
-          }
-
-
-
-
-       
+                peClass.start_date = DateTime.SpecifyKind(peClass.start_date, DateTimeKind.Utc);
+                var user = await _userManager.GetUserAsync(User);
+                var customerClass = db.CustomerObj.SingleOrDefault(x => x.email == user.Email);
+                peClass.usersid = customerClass.id;
+                db.PetCaresObj.Add(peClass);
+                db.SaveChanges();
+                return RedirectToAction("Index");
+            }
+            var vetCenters = await db.VetCentersObj.ToListAsync();
+            ViewBag.VetCenters = new SelectList(vetCenters, "id", "name");
+
+            return View(peClass);
+        }
+
+
+
+
+
 
 
@@ -229 +238 @@
             }
             ViewBag.isAuthenticated = await getCrrentUser();
+            // no access for standard user
+            ViewBag.OnlyAdminManager = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
 
             if (ModelState.IsValid)
@@ -260 +271 @@
                 return RedirectToAction("NotExist", "Error");
             }
+            // no access for standard user
+            ViewBag.OnlyAdminManager = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
+
             return View(peClass);
         }