notazof/yavsc
1
1
Fork 0
Code Issues 1 Pull requests 1 Projects 2 Releases 9 Packages Wiki Activity Actions

act wr admin only

Browse source
This commit is contained in:
Paul Schneider 2017-02-25 17:48:46 +01:00
commit 7873e701ed
1 changed files with 8 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

14
Yavsc/ApiControllers/ActivityApiController.cs
View file

@ -1,6 +1,8 @@
using System.Collections.Generic; using System.Collections.Generic;
using System.Linq; using System.Linq;
using System.Security.Claims;
using System.Threading.Tasks; using System.Threading.Tasks;
using Microsoft.AspNet.Authorization;
using Microsoft.AspNet.Http; using Microsoft.AspNet.Http;
using Microsoft.AspNet.Mvc; using Microsoft.AspNet.Mvc;
using Microsoft.Data.Entity; using Microsoft.Data.Entity;
@ -47,7 +49,7 @@ namespace Yavsc.Controllers
} }
// PUT: api/ActivityApi/5 // PUT: api/ActivityApi/5
[HttpPut("{id}")] [HttpPut("{id}"),Authorize("AdministratorOnly")]
public async Task<IActionResult> PutActivity([FromRoute] string id, [FromBody] Activity activity) public async Task<IActionResult> PutActivity([FromRoute] string id, [FromBody] Activity activity)
{ {
if (!ModelState.IsValid) if (!ModelState.IsValid)
@ -64,7 +66,7 @@ namespace Yavsc.Controllers
try try
{ {
await _context.SaveChangesAsync(); await _context.SaveChangesAsync(User.GetUserId());
} }
catch (DbUpdateConcurrencyException) catch (DbUpdateConcurrencyException)
{ {
@ -82,7 +84,7 @@ namespace Yavsc.Controllers
} }
// POST: api/ActivityApi // POST: api/ActivityApi
[HttpPost] [HttpPost,Authorize("AdministratorOnly")]
public async Task<IActionResult> PostActivity([FromBody] Activity activity) public async Task<IActionResult> PostActivity([FromBody] Activity activity)
{ {
if (!ModelState.IsValid) if (!ModelState.IsValid)
@ -93,7 +95,7 @@ namespace Yavsc.Controllers
_context.Activities.Add(activity); _context.Activities.Add(activity);
try try
{ {
await _context.SaveChangesAsync(); await _context.SaveChangesAsync(User.GetUserId());
} }
catch (DbUpdateException) catch (DbUpdateException)
{ {
@ -111,7 +113,7 @@ namespace Yavsc.Controllers
} }
// DELETE: api/ActivityApi/5 // DELETE: api/ActivityApi/5
[HttpDelete("{id}")] [HttpDelete("{id}"),Authorize("AdministratorOnly")]
public async Task<IActionResult> DeleteActivity([FromRoute] string id) public async Task<IActionResult> DeleteActivity([FromRoute] string id)
{ {
if (!ModelState.IsValid) if (!ModelState.IsValid)
@ -126,7 +128,7 @@ namespace Yavsc.Controllers
} }
_context.Activities.Remove(activity); _context.Activities.Remove(activity);
await _context.SaveChangesAsync(); await _context.SaveChangesAsync(User.GetUserId());
return Ok(activity); return Ok(activity);
} }