Diplomarbeit-Absolventenverein/Module.HallOfFame
6
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: Relaxed file upload authorization from 'Edit' to 'View' permission and updated the year input help text.

Browse Source
This commit is contained in:
Adam Gaiswinkler
2026-02-26 17:08:52 +01:00
parent 16cb602d3a
commit f42c3fe9f2
3 changed files with 8 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
Server/Services/HallOfFameService.cs
View File

@@ -189,7 +189,7 @@ namespace SZUAbsolventenverein.Module.HallOfFame.Services
}
public async Task<string> UploadFileAsync(Stream stream, string fileName, int ModuleId)
{
if (_userPermissions.IsAuthorized(_accessor.HttpContext.User, _alias.SiteId, EntityNames.Module, ModuleId, PermissionNames.Edit))
if (_userPermissions.IsAuthorized(_accessor.HttpContext.User, _alias.SiteId, EntityNames.Module, ModuleId, PermissionNames.View))
{
var extension = Path.GetExtension(fileName).ToLower();