Changeset b373fea for ChapterX.Application/Chapter/Commands/DeleteHandler.cs

Timestamp:

06/23/26 15:20:39 (12 days ago)

Author:

kikisrbinoska <srbinoskakristina07@…>

Branches:

main

Children:

0b502c2

Parents:

d300631

Message:

Fixes for authentication and auhtorization\

File:

• ChapterX.Application/Chapter/Commands/DeleteHandler.cs (modified) (1 diff)

ChapterX.Application/Chapter/Commands/DeleteHandler.cs

@@ -18 +18 @@
         public async Task<DeleteResponse> Handle(DeleteRequest request, CancellationToken cancellationToken)
         {
-            var chapter = await _chapterRepository.GetByIdAsync(request.Id, cancellationToken);
+            var chapter = await _chapterRepository.GetByIdWithStoryAsync(request.Id, cancellationToken);
             if (chapter is null)
                 return new DeleteResponse(false);
+
+            if (chapter.Story.UserId != request.CallerId)
+                throw new UnauthorizedAccessException("You do not own this chapter.");
 
             await _chapterRepository.DeleteAsync(chapter, cancellationToken);