notazof/yavsc
1
0
Fork 0
Code Issues Pull requests Projects 1 Releases 3 Packages Wiki Activity Actions

* BlogsController.cs: * refactoring

Browse source 
* implements a file posting, in a directory named with an user's post
  id

* BlogManager.cs:
* BlogsController.cs: Any user may edit any title
This commit is contained in:
Paul Schneider 2015-09-11 16:26:18 +02:00
commit b45f681ae9
5 changed files with 85 additions and 31 deletions
Download patch file Download diff file Expand all files Collapse all files

8
web/Controllers/BlogsController.cs
View file

@ -314,8 +314,6 @@ namespace Yavsc.Controllers
return GetPost (model.PostId);
}
/// <summary>
/// Remove the specified blog entry, by its author and title,
/// using returnUrl as the URL to return to,
@ -334,7 +332,10 @@ namespace Yavsc.Controllers
ViewData ["returnUrl"] = returnUrl;
ViewData ["UserName"] = user;
ViewData ["Title"] = title;
BlogManager.CheckAuthCanEdit (user, title);
if (Membership.GetUser ().UserName != user)
if (!Roles.IsUserInRole("Admin"))
throw new AuthorizationDenied (user);
if (!confirm)
return View ("RemoveTitle");
BlogManager.RemoveTitle (user, title);
@ -353,6 +354,7 @@ namespace Yavsc.Controllers
[Authorize]
public ActionResult RemovePost (long id, string returnUrl, bool confirm = false)
{
// ensures the access control
BlogEntry e = BlogManager.GetForEditing (id);
if (e == null)
return new HttpNotFoundResult ("post id "+id.ToString());