important bug fix.
This commit is contained in:
@@ -227,10 +227,13 @@ namespace CarCareTracker.Controllers
|
|||||||
private bool DeleteSupplyRecordWithChecks(int supplyRecordId)
|
private bool DeleteSupplyRecordWithChecks(int supplyRecordId)
|
||||||
{
|
{
|
||||||
var existingRecord = _supplyRecordDataAccess.GetSupplyRecordById(supplyRecordId);
|
var existingRecord = _supplyRecordDataAccess.GetSupplyRecordById(supplyRecordId);
|
||||||
//security check.
|
if (existingRecord.VehicleId != default)
|
||||||
if (!_userLogic.UserCanEditVehicle(GetUserID(), existingRecord.VehicleId))
|
|
||||||
{
|
{
|
||||||
return false;
|
//security check only if not editing shop supply.
|
||||||
|
if (!_userLogic.UserCanEditVehicle(GetUserID(), existingRecord.VehicleId))
|
||||||
|
{
|
||||||
|
return false;
|
||||||
|
}
|
||||||
}
|
}
|
||||||
var result = _supplyRecordDataAccess.DeleteSupplyRecordById(existingRecord.Id);
|
var result = _supplyRecordDataAccess.DeleteSupplyRecordById(existingRecord.Id);
|
||||||
return result;
|
return result;
|
||||||
|
|||||||
Reference in New Issue
Block a user