fixe la suppression d'une déclaration d'activité

This commit is contained in:
Paul Schneider 2017-03-03 11:47:06 +01:00
commit 53aef70231

View file

@ -152,9 +152,10 @@ namespace Yavsc.Controllers
// POST: Do/Delete/5
[HttpPost, ActionName("Delete"),Authorize]
[ValidateAntiForgeryToken]
public IActionResult DeleteConfirmed(string id, string activityCode)
public IActionResult DeleteConfirmed(UserActivity userActivity)
{
UserActivity userActivity = _context.UserActivities.Single(m => m.UserId == id && m.DoesCode == activityCode);
if (!ModelState.IsValid)
return new BadRequestObjectResult(ModelState);
if (!User.IsInRole("Administrator"))
if (User.GetUserId() != userActivity.UserId) {
ModelState.AddModelError("User","You're not admin.");