notazof/yavsc
1
0
Fork 0
Code Issues Pull requests Projects 1 Releases 3 Packages Wiki Activity Actions

act wr admin only

Browse source
This commit is contained in:
Paul Schneider 2017-02-25 17:48:46 +01:00
commit 7873e701ed
1 changed files with 8 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

14
Yavsc/ApiControllers/ActivityApiController.cs
View file

@ -1,6 +1,8 @@
using System.Collections.Generic;
using System.Linq;
using System.Security.Claims;
using System.Threading.Tasks;
using Microsoft.AspNet.Authorization;
using Microsoft.AspNet.Http;
using Microsoft.AspNet.Mvc;
using Microsoft.Data.Entity;
@ -47,7 +49,7 @@ namespace Yavsc.Controllers
}
// PUT: api/ActivityApi/5
[HttpPut("{id}")]
[HttpPut("{id}"),Authorize("AdministratorOnly")]
public async Task<IActionResult> PutActivity([FromRoute] string id, [FromBody] Activity activity)
{
if (!ModelState.IsValid)
@ -64,7 +66,7 @@ namespace Yavsc.Controllers
try
{
await _context.SaveChangesAsync();
await _context.SaveChangesAsync(User.GetUserId());
}
catch (DbUpdateConcurrencyException)
{
@ -82,7 +84,7 @@ namespace Yavsc.Controllers
}
// POST: api/ActivityApi
[HttpPost]
[HttpPost,Authorize("AdministratorOnly")]
public async Task<IActionResult> PostActivity([FromBody] Activity activity)
{
if (!ModelState.IsValid)
@ -93,7 +95,7 @@ namespace Yavsc.Controllers
_context.Activities.Add(activity);
try
{
await _context.SaveChangesAsync();
await _context.SaveChangesAsync(User.GetUserId());
}
catch (DbUpdateException)
{
@ -111,7 +113,7 @@ namespace Yavsc.Controllers
}
// DELETE: api/ActivityApi/5
[HttpDelete("{id}")]
[HttpDelete("{id}"),Authorize("AdministratorOnly")]
public async Task<IActionResult> DeleteActivity([FromRoute] string id)
{
if (!ModelState.IsValid)
@ -126,7 +128,7 @@ namespace Yavsc.Controllers
}
_context.Activities.Remove(activity);
await _context.SaveChangesAsync();
await _context.SaveChangesAsync(User.GetUserId());
return Ok(activity);
}