Added Roles

Added role based authentication to contollers
This commit is contained in:
s459315 2022-08-06 16:21:52 +02:00
parent f118635029
commit 35c5e1af28
5 changed files with 7 additions and 45 deletions

View File

@ -9,15 +9,16 @@ using System.Web.Http;
namespace RMDataManager.Controllers namespace RMDataManager.Controllers
{ {
[Authorize]
public class InventoryController : ApiController public class InventoryController : ApiController
{ {
[Authorize(Roles = "Admin,Manager")]
public List<InventoryModel> Get() public List<InventoryModel> Get()
{ {
InventoryData data = new InventoryData(); InventoryData data = new InventoryData();
return data.GetInventory(); return data.GetInventory();
} }
[Authorize(Roles = "Admin")]
public void Post(InventoryModel item) public void Post(InventoryModel item)
{ {
InventoryData data = new InventoryData(); InventoryData data = new InventoryData();

View File

@ -9,7 +9,7 @@ using System.Web.Http;
namespace RMDataManager.Controllers namespace RMDataManager.Controllers
{ {
[Authorize] [Authorize(Roles = "Cashier")]
public class ProductController : ApiController public class ProductController : ApiController
{ {
public List<ProductModel> Get() public List<ProductModel> Get()

View File

@ -10,9 +10,10 @@ using System.Web.Http;
namespace RMDataManager.Controllers namespace RMDataManager.Controllers
{ {
[Authorize]
public class SaleController : ApiController public class SaleController : ApiController
{ {
[Authorize(Roles = "Cashier")]
public void Post(SaleModel sale) public void Post(SaleModel sale)
{ {
string cashierId = RequestContext.Principal.Identity.GetUserId(); string cashierId = RequestContext.Principal.Identity.GetUserId();
@ -21,6 +22,7 @@ namespace RMDataManager.Controllers
data.SaveSale(sale, cashierId); data.SaveSale(sale, cashierId);
} }
[Authorize(Roles = "Admin,Manager")]
[Route("GetSalesReport")] [Route("GetSalesReport")]
public List<SaleReportModel> GetSalesReport() public List<SaleReportModel> GetSalesReport()
{ {

View File

@ -1,40 +0,0 @@
using System;
using System.Collections.Generic;
using System.Linq;
using System.Net;
using System.Net.Http;
using System.Web.Http;
namespace RMDataManager.Controllers
{
[Authorize]
public class ValuesController : ApiController
{
// GET api/values
public IEnumerable<string> Get()
{
return new string[] { "value1", "value2" };
}
// GET api/values/5
public string Get(int id)
{
return "value";
}
// POST api/values
public void Post([FromBody]string value)
{
}
// PUT api/values/5
public void Put(int id, [FromBody]string value)
{
}
// DELETE api/values/5
public void Delete(int id)
{
}
}
}

View File

@ -217,7 +217,6 @@
<Compile Include="Controllers\ProductController.cs" /> <Compile Include="Controllers\ProductController.cs" />
<Compile Include="Controllers\SaleController.cs" /> <Compile Include="Controllers\SaleController.cs" />
<Compile Include="Controllers\UserController.cs" /> <Compile Include="Controllers\UserController.cs" />
<Compile Include="Controllers\ValuesController.cs" />
<Compile Include="Global.asax.cs"> <Compile Include="Global.asax.cs">
<DependentUpon>Global.asax</DependentUpon> <DependentUpon>Global.asax</DependentUpon>
</Compile> </Compile>