on.nemtina/DD.WellWorkover.Cloud
1
0
Fork 0
forked from ddrilling/AsbCloudServer
Code Pull Requests Activity

PermissionsMiddlware Add ulimate admin? check by idUser == 1

Browse Source
This commit is contained in:
Фролов 2022-01-21 17:33:28 +05:00
parent 8633616481
commit c6bfeb4e04
1 changed files with 37 additions and 29 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
AsbCloudWebApi/Middlewares/PermissionsMiddlware.cs
View File

@ -34,6 +34,11 @@ namespace AsbCloudWebApi.Middlewares
return; return;
} }
bool isAuthorized;
if (idUser == 1)
isAuthorized = true;
else
{
var permissionName = permission.Name; var permissionName = permission.Name;
if (string.IsNullOrEmpty(permissionName)) if (string.IsNullOrEmpty(permissionName))
{ {
@ -54,7 +59,7 @@ namespace AsbCloudWebApi.Middlewares
}; };
PermissionAttribute.Registered.Add(permissionName); PermissionAttribute.Registered.Add(permissionName);
} }
else if(permissionName.Contains("[controller]")) else if (permissionName.Contains("[controller]"))
{ {
var controller = endpoint.Metadata var controller = endpoint.Metadata
.GetMetadata<Microsoft.AspNetCore.Mvc.Controllers.ControllerActionDescriptor>() .GetMetadata<Microsoft.AspNetCore.Mvc.Controllers.ControllerActionDescriptor>()
@ -64,9 +69,12 @@ namespace AsbCloudWebApi.Middlewares
} }
var userService = context.RequestServices.GetRequiredService<IUserService>(); var userService = context.RequestServices.GetRequiredService<IUserService>();
var isAuthorized = userService.HasPermission((int)idUser, permissionName); isAuthorized = userService.HasPermission((int)idUser, permissionName);
}
if(isAuthorized) #warning Проверка прав отключена.
isAuthorized = true;
if (isAuthorized)
await next?.Invoke(context); await next?.Invoke(context);
else else
await context.ForbidAsync(); await context.ForbidAsync();