notazof/yavsc
1
0
Fork 0
Code Issues Pull requests 1 Projects 1 Releases 3 Packages Wiki Activity Actions

estimate view authorization

Browse source
This commit is contained in:
Paul Schneider 2016-12-02 13:22:39 +01:00
commit 5159723eab
7 changed files with 71 additions and 28 deletions
Download patch file Download diff file Expand all files Collapse all files

3
Yavsc/ViewModels/Auth/BlogViewHandler.cs
View file

@ -8,7 +8,8 @@ namespace Yavsc.ViewModels.Auth
{
protected override void Handle(AuthorizationContext context, ViewRequirement requirement, Blog resource)
{
if (context.User.IsInRole("Moderator"))
if (context.User.IsInRole(Constants.BlogModeratorGroupName)
|| context.User.IsInRole(Constants.AdminGroupName))
context.Succeed(requirement);
else if (context.User.Identity.IsAuthenticated)
if (resource.AuthorId == context.User.GetUserId())