Added CanManageSettings claim, Implemented authorization for admin settings

This commit is contained in:
2025-11-02 15:23:31 +01:00
parent d559328902
commit af70cfb5f8
7 changed files with 38 additions and 4 deletions

View File

@@ -28,12 +28,15 @@ public class SettingsController : Controller
return View();
}
[Authorize(Roles = "CanManageSettings")]
[HttpGet("Admin")]
public async Task<IActionResult> AdminAsync()
{
AdminSettingsModel adminSettingsModel = await _ldap.GetAdminSettingsModelAsync();
return View();
}
[Authorize(Roles = "CanManageSettings")]
[HttpPut("Admin")]
public async Task<AdminUpdateResponseModel> UpdateAdminAsync([FromBody]AdminUpdateRequestModel adminSettingsRequestModel)
{