cphipps/lubelog
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix CollaboratorFilter bug.

Browse Source
This commit is contained in:
DESKTOP-T0O5CDB\DESK-555BD
2024-11-30 12:23:48 -07:00
parent 244272621c
commit 5f357c9f84
1 changed files with 23 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
Filter/CollaboratorFilter.cs
View File

@@ -18,6 +18,8 @@ namespace CarCareTracker.Filter
public override void OnActionExecuting(ActionExecutingContext filterContext) public override void OnActionExecuting(ActionExecutingContext filterContext)
{ {
if (!filterContext.HttpContext.User.IsInRole(nameof(UserData.IsRootUser))) if (!filterContext.HttpContext.User.IsInRole(nameof(UserData.IsRootUser)))
{
if (filterContext.ActionArguments.ContainsKey("vehicleId"))
{ {
var vehicleId = int.Parse(filterContext.ActionArguments["vehicleId"].ToString()); var vehicleId = int.Parse(filterContext.ActionArguments["vehicleId"].ToString());
if (vehicleId != default) if (vehicleId != default)
@@ -27,7 +29,8 @@ namespace CarCareTracker.Filter
{ {
filterContext.Result = new RedirectResult("/Error/Unauthorized"); filterContext.Result = new RedirectResult("/Error/Unauthorized");
} }
} else }
else
{ {
var shopSupplyEndpoints = new List<string> { "ImportToVehicleIdFromCsv", "GetSupplyRecordsByVehicleId", "ExportFromVehicleToCsv" }; var shopSupplyEndpoints = new List<string> { "ImportToVehicleIdFromCsv", "GetSupplyRecordsByVehicleId", "ExportFromVehicleToCsv" };
if (shopSupplyEndpoints.Contains(filterContext.RouteData.Values["action"].ToString()) && !_config.GetServerEnableShopSupplies()) if (shopSupplyEndpoints.Contains(filterContext.RouteData.Values["action"].ToString()) && !_config.GetServerEnableShopSupplies())
@@ -41,6 +44,10 @@ namespace CarCareTracker.Filter
filterContext.Result = new RedirectResult("/Error/Unauthorized"); filterContext.Result = new RedirectResult("/Error/Unauthorized");
} }
} }
} else
{
filterContext.Result = new RedirectResult("/Error/Unauthorized");
}
} }
} }
} }