admin/raven
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Browse Source
This commit is contained in:
John Cardinal
2021-10-18 19:24:40 +00:00
parent 921db07d3f
commit cb33d70107
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
server/AyaNova/Controllers/UserController.cs
View File

@@ -55,7 +55,7 @@ namespace AyaNova.Api.Controllers
[HttpGet("{id}")] [HttpGet("{id}")]
public async Task<IActionResult> GetUser([FromRoute] long id) public async Task<IActionResult> GetUser([FromRoute] long id)
{ {
if (!serverState.IsOpen) if (!serverState.IsOpen && UserIdFromContext.Id(HttpContext.Items) != 1)//bypass for superuser to fix fundamental problems
return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason)); return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
//Instantiate the business object handler //Instantiate the business object handler
@@ -95,7 +95,7 @@ namespace AyaNova.Api.Controllers
[HttpPut] [HttpPut]
public async Task<IActionResult> PutUser([FromBody] User updatedObject) public async Task<IActionResult> PutUser([FromBody] User updatedObject)
{ {
if (!serverState.IsOpen) if (!serverState.IsOpen && UserIdFromContext.Id(HttpContext.Items) != 1)//bypass for superuser to fix fundamental problems
return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason)); return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
if (!ModelState.IsValid) if (!ModelState.IsValid)
return BadRequest(new ApiErrorResponse(ModelState)); return BadRequest(new ApiErrorResponse(ModelState));
@@ -198,7 +198,7 @@ namespace AyaNova.Api.Controllers
[HttpDelete("{id}")] [HttpDelete("{id}")]
public async Task<IActionResult> DeleteUser([FromRoute] long id) public async Task<IActionResult> DeleteUser([FromRoute] long id)
{ {
if (!serverState.IsOpen) if (!serverState.IsOpen && UserIdFromContext.Id(HttpContext.Items) != 1)//bypass for superuser to fix fundamental problems
return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason)); return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
if (!ModelState.IsValid) if (!ModelState.IsValid)
return BadRequest(new ApiErrorResponse(ModelState)); return BadRequest(new ApiErrorResponse(ModelState));
@@ -225,7 +225,7 @@ namespace AyaNova.Api.Controllers
[HttpGet("list")] [HttpGet("list")]
public async Task<IActionResult> GetInsideUserList() public async Task<IActionResult> GetInsideUserList()
{ {
if (!serverState.IsOpen) if (!serverState.IsOpen && UserIdFromContext.Id(HttpContext.Items) != 1)//bypass for superuser to fix fundamental problems
return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason)); return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
if (!Authorized.HasReadFullRole(HttpContext.Items, AyaType.User)) if (!Authorized.HasReadFullRole(HttpContext.Items, AyaType.User))
@@ -350,7 +350,7 @@ namespace AyaNova.Api.Controllers
public async Task<IActionResult> GetInsideStatus(long id) public async Task<IActionResult> GetInsideStatus(long id)
{ {
//This method is used by the Client UI to determine the correct edit form to show //This method is used by the Client UI to determine the correct edit form to show
if (serverState.IsClosed) if (serverState.IsClosed && UserIdFromContext.Id(HttpContext.Items) != 1)//bypass for superuser to fix fundamental problems
return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason)); return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
if (!Authorized.HasSelectRole(HttpContext.Items, AyaType.User)) if (!Authorized.HasSelectRole(HttpContext.Items, AyaType.User))