Added Roles
Added role based authentication to contollers
This commit is contained in:
parent
f118635029
commit
35c5e1af28
@ -9,15 +9,16 @@ using System.Web.Http;
|
|||||||
|
|
||||||
namespace RMDataManager.Controllers
|
namespace RMDataManager.Controllers
|
||||||
{
|
{
|
||||||
[Authorize]
|
|
||||||
public class InventoryController : ApiController
|
public class InventoryController : ApiController
|
||||||
{
|
{
|
||||||
|
[Authorize(Roles = "Admin,Manager")]
|
||||||
public List<InventoryModel> Get()
|
public List<InventoryModel> Get()
|
||||||
{
|
{
|
||||||
InventoryData data = new InventoryData();
|
InventoryData data = new InventoryData();
|
||||||
return data.GetInventory();
|
return data.GetInventory();
|
||||||
}
|
}
|
||||||
|
[Authorize(Roles = "Admin")]
|
||||||
public void Post(InventoryModel item)
|
public void Post(InventoryModel item)
|
||||||
{
|
{
|
||||||
InventoryData data = new InventoryData();
|
InventoryData data = new InventoryData();
|
||||||
|
@ -9,7 +9,7 @@ using System.Web.Http;
|
|||||||
|
|
||||||
namespace RMDataManager.Controllers
|
namespace RMDataManager.Controllers
|
||||||
{
|
{
|
||||||
[Authorize]
|
[Authorize(Roles = "Cashier")]
|
||||||
public class ProductController : ApiController
|
public class ProductController : ApiController
|
||||||
{
|
{
|
||||||
public List<ProductModel> Get()
|
public List<ProductModel> Get()
|
||||||
|
@ -10,9 +10,10 @@ using System.Web.Http;
|
|||||||
|
|
||||||
namespace RMDataManager.Controllers
|
namespace RMDataManager.Controllers
|
||||||
{
|
{
|
||||||
[Authorize]
|
|
||||||
public class SaleController : ApiController
|
public class SaleController : ApiController
|
||||||
{
|
{
|
||||||
|
[Authorize(Roles = "Cashier")]
|
||||||
public void Post(SaleModel sale)
|
public void Post(SaleModel sale)
|
||||||
{
|
{
|
||||||
string cashierId = RequestContext.Principal.Identity.GetUserId();
|
string cashierId = RequestContext.Principal.Identity.GetUserId();
|
||||||
@ -21,6 +22,7 @@ namespace RMDataManager.Controllers
|
|||||||
data.SaveSale(sale, cashierId);
|
data.SaveSale(sale, cashierId);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
[Authorize(Roles = "Admin,Manager")]
|
||||||
[Route("GetSalesReport")]
|
[Route("GetSalesReport")]
|
||||||
public List<SaleReportModel> GetSalesReport()
|
public List<SaleReportModel> GetSalesReport()
|
||||||
{
|
{
|
||||||
|
@ -1,40 +0,0 @@
|
|||||||
using System;
|
|
||||||
using System.Collections.Generic;
|
|
||||||
using System.Linq;
|
|
||||||
using System.Net;
|
|
||||||
using System.Net.Http;
|
|
||||||
using System.Web.Http;
|
|
||||||
|
|
||||||
namespace RMDataManager.Controllers
|
|
||||||
{
|
|
||||||
[Authorize]
|
|
||||||
public class ValuesController : ApiController
|
|
||||||
{
|
|
||||||
// GET api/values
|
|
||||||
public IEnumerable<string> Get()
|
|
||||||
{
|
|
||||||
return new string[] { "value1", "value2" };
|
|
||||||
}
|
|
||||||
|
|
||||||
// GET api/values/5
|
|
||||||
public string Get(int id)
|
|
||||||
{
|
|
||||||
return "value";
|
|
||||||
}
|
|
||||||
|
|
||||||
// POST api/values
|
|
||||||
public void Post([FromBody]string value)
|
|
||||||
{
|
|
||||||
}
|
|
||||||
|
|
||||||
// PUT api/values/5
|
|
||||||
public void Put(int id, [FromBody]string value)
|
|
||||||
{
|
|
||||||
}
|
|
||||||
|
|
||||||
// DELETE api/values/5
|
|
||||||
public void Delete(int id)
|
|
||||||
{
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
@ -217,7 +217,6 @@
|
|||||||
<Compile Include="Controllers\ProductController.cs" />
|
<Compile Include="Controllers\ProductController.cs" />
|
||||||
<Compile Include="Controllers\SaleController.cs" />
|
<Compile Include="Controllers\SaleController.cs" />
|
||||||
<Compile Include="Controllers\UserController.cs" />
|
<Compile Include="Controllers\UserController.cs" />
|
||||||
<Compile Include="Controllers\ValuesController.cs" />
|
|
||||||
<Compile Include="Global.asax.cs">
|
<Compile Include="Global.asax.cs">
|
||||||
<DependentUpon>Global.asax</DependentUpon>
|
<DependentUpon>Global.asax</DependentUpon>
|
||||||
</Compile>
|
</Compile>
|
||||||
|
Loading…
Reference in New Issue
Block a user