gehgassiGmbH/gehgassi_backend
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Change authorization policy for EditCustomer method

Browse Source 
Updated the authorization policy for the `EditCustomer` method in the `AdvertisementController` to allow access only to users with the "Customer" role, replacing the previous "Power User" role requirement.
This commit is contained in:
Florian Mihalits 2025-08-11 18:01:46 +02:00
parent 555273aed1
commit fafbc55732
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
gehGassi.Web/Controllers/AdvertisementController.cs
View File

@ -776,7 +776,7 @@ namespace gehGassi.Web.Controllers
/// </summary> /// </summary>
/// <param name="model">Model</param> /// <param name="model">Model</param>
/// <returns>Json</returns> /// <returns>Json</returns>
[Authorize(Policy = Policies.PowerUserOnly)] [Authorize(Policy = Policies.CustomerOnly)]
[HasPermission(Permission.AdvertisementsManage, Permission.AdvertisementsEdit)] [HasPermission(Permission.AdvertisementsManage, Permission.AdvertisementsEdit)]
[CustomerAuthorize("CustomerId")] [CustomerAuthorize("CustomerId")]
[ValidateAntiForgeryToken] [ValidateAntiForgeryToken]