notazof/yavsc
1
0
Fork 0
Code Issues Pull requests Projects 1 Releases 3 Packages Wiki Activity Actions

should implement the access rulle to a blog post

Browse source
This commit is contained in:
Paul Schneider 2017-02-06 17:30:59 +01:00
commit 5a8ee9b296
1 changed files with 10 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

14
Yavsc/ViewModels/Auth/Handlers/BlogViewHandler.cs
View file

@ -1,3 +1,4 @@
using System.Linq;
using System.Security.Claims; using System.Security.Claims;
using Microsoft.AspNet.Authorization; using Microsoft.AspNet.Authorization;
using Yavsc.Models; using Yavsc.Models;
@ -15,11 +16,16 @@ namespace Yavsc.ViewModels.Auth.Handlers
if (resource.AuthorId == context.User.GetUserId()) if (resource.AuthorId == context.User.GetUserId())
context.Succeed(requirement); context.Succeed(requirement);
else if (resource.Visible) { else if (resource.Visible) {
if (resource.ACL.Count>0)
// TODO && ( resource.Circles == null || context.User belongs to resource.Circles ) {
context.Succeed(requirement); var uid = context.User.GetUserId();
if (resource.ACL.Any(a=>a.Allowed.Members.Any(m=>m.MemberId == uid )))
context.Succeed(requirement);
else context.Fail();
}
else context.Succeed(requirement);
} }
else context.Fail();
} }
} }
} }