kocoded/oqtane.framework
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

allow search content permissions to support roles

Browse Source
This commit is contained in:
sbwalker 2024-07-17 19:34:19 -04:00
parent 0c80e28754
commit 45afbbdac6
1 changed files with 16 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
Oqtane.Server/Services/SearchService.cs
View File

@ -90,12 +90,23 @@ namespace Oqtane.Services
var visible = true;
foreach (var permission in searchContent.Permissions.Split(','))
{
var entityName = permission.Split(":")[0];
var entityId = int.Parse(permission.Split(":")[1]);
if (!_userPermissions.IsAuthorized(_accessor.HttpContext.User, searchQuery.SiteId, entityName, entityId, PermissionNames.View))
if (permission.Contains(":")) // permission
{
visible = false;
break;
var entityName = permission.Split(":")[0];
var entityId = int.Parse(permission.Split(":")[1]);
if (!_userPermissions.IsAuthorized(_accessor.HttpContext.User, searchQuery.SiteId, entityName, entityId, PermissionNames.View))
{
visible = false;
break;
}
}
else // role name
{
if (!_accessor.HttpContext.User.IsInRole(permission))
{
visible = false;
break;
}
}
}
return visible;