Implemented authorization for other controllers

src/Controllers/AssetsController.cs

@@ -20,6 +20,7 @@ public class AssetsController : Controller
         _logger = logger;
     }
 
+    [Authorize(Roles = "CanManageAssets,CanInventorize")]
     [HttpGet("Get")]
     public async Task<AssetsGetResponseModel> GetAllAssetModelAsync(string Cn)
     {
@@ -41,6 +42,7 @@ public class AssetsController : Controller
         return result;
     }
 
+    [Authorize(Roles = "CanManageAssets")]
     [HttpGet("GetAll")]
     public async Task<AssetsGetAllResponseModel> GetAllAssetModelAsync()
     {
@@ -63,6 +65,7 @@ public class AssetsController : Controller
         return result;
     }
 
+    [Authorize(Roles = "CanManageAssets")]
     [HttpPost("Create")]
     public async Task<AssetsCreateResponseModel> Create([FromBody]AssetsCreateRequestModel assetModel)
     {
@@ -117,6 +120,7 @@ public class AssetsController : Controller
         return result;
     }
 
+    [Authorize(Roles = "CanManageAssets")]
     [HttpDelete("Delete")]
     public async Task<AssetsDeleteResponseModel> Delete([BindRequired] string cn)
     {        
@@ -143,6 +147,7 @@ public class AssetsController : Controller
         });
     }
 
+    [Authorize(Roles = "CanManageAssets,CanInventorize")]
     [HttpPatch("Update")]
     public async Task<AssetsUpdateResponseModel> Update([FromBody] AssetsModifyRequestModel requestModel)
     {

src/Controllers/GroupsController.cs

@@ -5,7 +5,7 @@ using Berufsschule_HAM.Models;
 using System.Text.Json;
 using Microsoft.AspNetCore.Authorization;
 
-[Authorize]
+[Authorize(Roles = "CanManageGroups")]
 [Route("[controller]")]
 public class GroupsController : Controller
 {

src/Controllers/LocationsController.cs

@@ -6,7 +6,7 @@ using Microsoft.AspNetCore.Authorization;
 using Novell.Directory.Ldap;
 using Berufsschule_HAM.Helpers;
 
-[Authorize]
+[Authorize(Roles = "CanManageLocations")]
 [Route("[controller]")]
 public class LocationsController : Controller
 {

src/Controllers/UsersController.cs

@@ -9,7 +9,7 @@ using System.Text;
 using Microsoft.AspNetCore.Authorization;
 using System.Text.Json;
 
-[Authorize]
+[Authorize(Roles = "CanManageUsers")]
 [Route("[controller]")]
 public class UsersController : Controller
 {