anas/divan
1
0
Fork 0
Code Issues 12 Pull Requests Actions Packages Projects Releases Wiki Activity

fixes for /api/user/isadmin method

Browse Source
This commit is contained in:
Hamid Reza Mohammadi 2021-03-21 18:09:52 +03:30
parent aeff492ed4
commit 0fd6f8995a
1 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
RSecurityBackend/Controllers/AppUserControllerBase.cs
View File

@ -436,6 +436,22 @@ namespace RSecurityBackend.Controllers
public async Task<IActionResult> IsAdmin(Guid userId)
{
Guid loggedOnUserId = new Guid(User.Claims.FirstOrDefault(c => c.Type == "UserId").Value);
RServiceResult<bool> isAdmin = await _appUserService.IsAdmin(loggedOnUserId);
if (!string.IsNullOrEmpty(isAdmin.ExceptionString))
return BadRequest(isAdmin.ExceptionString);
if (!isAdmin.Result)
{
if(userId != loggedOnUserId)
{
return Forbid();
}
return Ok(false);
}
if (userId == loggedOnUserId)
{
return Ok(true);
}
RServiceResult<bool> res = await _appUserService.IsAdmin(userId);