Index: PostgreSqlDotnetCore/Controllers/PetCaresController.cs
===================================================================
--- PostgreSqlDotnetCore/Controllers/PetCaresController.cs	(revision 72b1da27c6dadc5f1ae45e91e7c4f60289917575)
+++ PostgreSqlDotnetCore/Controllers/PetCaresController.cs	(revision 118e414d91bed6d2f18476304a58e95728403f8c)
@@ -26,18 +26,18 @@
               return View();
           }*/
-         public async Task<ActionResult> Create()
-         {
-             
-             
+        public async Task<ActionResult> Create()
+        {
+
+
             UsersClass customerClass = await getCrrentUser();
-            
+
             ViewBag.isAuthenticated = customerClass;
             var vetCenters = await db.VetCentersObj.ToListAsync();
-             ViewBag.VetCenters = new SelectList(vetCenters, "id", "name");
-
-             return View();
-         }
-
-       
+            ViewBag.VetCenters = new SelectList(vetCenters, "id", "name");
+
+            return View();
+        }
+
+
 
 
@@ -53,8 +53,11 @@
                 return RedirectToAction("AccessDenied", "Error");
             }
+            // no access for standard user
+            ViewBag.OnlyAdminManager = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
+
             if (customerClass.role_id == RoleConstants.Standard)
             {
                 // query
-                            var query = from st in db.PetCaresObj
+                var query = from st in db.PetCaresObj
                             where st.usersid == customerClass.id
                             select st;
@@ -72,5 +75,5 @@
                 // query
                 var queryVetCenters = from kk in db.VetCentersObj
-                            select kk;
+                                      select kk;
 
                 // query
@@ -85,5 +88,6 @@
 
                 return View(petCareAllData);
-            } else
+            }
+            else
             {
                 return View(db.PetCaresObj.ToList());
@@ -99,5 +103,5 @@
                 return RedirectToAction("NotExist", "Error");
             }
-            UsersClass customerClass = await getCrrentUser(); 
+            UsersClass customerClass = await getCrrentUser();
             ViewBag.isAuthenticated = customerClass;
             Pet_CaresClass peClass = db.PetCaresObj.Find(id);
@@ -106,4 +110,7 @@
                 return RedirectToAction("NotExist", "Error");
             }
+            // no access for standard user
+            ViewBag.OnlyAdminManager = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
+
             return View(peClass);
         }
@@ -126,35 +133,37 @@
         [HttpPost]
         [ValidateAntiForgeryToken]
-         public async Task<ActionResult> CreateAsync([Bind(include: "id,title,description,dateending, start_date, usersid, vetcentersid")] Pet_CaresClass peClass)
-          {
-              bool isAuthenticated = User.Identity.IsAuthenticated;
-              if (!isAuthenticated)
-              {
-                  return RedirectToAction("AccessDenied", "Error");
-              }
+        public async Task<ActionResult> CreateAsync([Bind(include: "id,title,description,dateending, start_date, usersid, vetcentersid")] Pet_CaresClass peClass)
+        {
+            bool isAuthenticated = User.Identity.IsAuthenticated;
+            if (!isAuthenticated)
+            {
+                return RedirectToAction("AccessDenied", "Error");
+            }
             ViewBag.isAuthenticated = new UsersClass();
+            // no access for standard user
+            ViewBag.OnlyAdminManager = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
 
             if (ModelState.IsValid)
-              {
+            {
                 ViewBag.isAuthenticated = new UsersClass();
                 peClass.dateending = DateTime.SpecifyKind(peClass.dateending, DateTimeKind.Utc);
-                  peClass.start_date = DateTime.SpecifyKind(peClass.start_date, DateTimeKind.Utc);
-                 var user = await _userManager.GetUserAsync(User);
-                  var customerClass = db.CustomerObj.SingleOrDefault(x => x.email == user.Email);
-                  peClass.usersid = customerClass.id;
-                  db.PetCaresObj.Add(peClass);
-                  db.SaveChanges();
-                  return RedirectToAction("Index");
-              }
-              var vetCenters = await db.VetCentersObj.ToListAsync();
-              ViewBag.VetCenters = new SelectList(vetCenters, "id", "name");
-
-              return View(peClass);
-          }
-
-
-
-
-       
+                peClass.start_date = DateTime.SpecifyKind(peClass.start_date, DateTimeKind.Utc);
+                var user = await _userManager.GetUserAsync(User);
+                var customerClass = db.CustomerObj.SingleOrDefault(x => x.email == user.Email);
+                peClass.usersid = customerClass.id;
+                db.PetCaresObj.Add(peClass);
+                db.SaveChanges();
+                return RedirectToAction("Index");
+            }
+            var vetCenters = await db.VetCentersObj.ToListAsync();
+            ViewBag.VetCenters = new SelectList(vetCenters, "id", "name");
+
+            return View(peClass);
+        }
+
+
+
+
+
 
 
@@ -229,4 +238,6 @@
             }
             ViewBag.isAuthenticated = await getCrrentUser();
+            // no access for standard user
+            ViewBag.OnlyAdminManager = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
 
             if (ModelState.IsValid)
@@ -260,4 +271,7 @@
                 return RedirectToAction("NotExist", "Error");
             }
+            // no access for standard user
+            ViewBag.OnlyAdminManager = await checkAuthorizationSpecificRoleAsync(RoleConstants.Admin) ?? await checkAuthorizationSpecificRoleAsync(RoleConstants.Manager);
+
             return View(peClass);
         }
