added security attribute to TenantController Get methods and resolved TenantId on server during Installation

2019-10-23 18:26:39 -04:00
parent 91c7528856
commit 414935dc58
4 changed files with 18 additions and 13 deletions
--- a/Oqtane.Server/Controllers/TenantController.cs
+++ b/Oqtane.Server/Controllers/TenantController.cs
@ -22,6 +22,7 @@ namespace Oqtane.Controllers

        // GET: api/<controller>
        [HttpGet]
+        [Authorize(Roles = Constants.HostRole)]
        public IEnumerable<Tenant> Get()
        {
            return Tenants.GetTenants();
@ -29,6 +30,7 @@ namespace Oqtane.Controllers

        // GET api/<controller>/5
        [HttpGet("{id}")]
+        [Authorize(Roles = Constants.HostRole)]
        public Tenant Get(int id)
        {
            return Tenants.GetTenant(id);