Add team roles and content management updates
This commit is contained in:
@@ -11,26 +11,11 @@ public static class AdminEndpoints
|
||||
|
||||
group.MapAdminSiteSettingsEndpoints();
|
||||
|
||||
var managerGroup = group.MapGroup(string.Empty)
|
||||
.AddEndpointFilter(RequireAdminWorkspaceRole);
|
||||
|
||||
managerGroup.MapAdminDashboardEndpoints();
|
||||
managerGroup.MapAdminSeasonManagementEndpoints();
|
||||
managerGroup.MapAdminModerationEndpoints();
|
||||
group.MapAdminDashboardEndpoints();
|
||||
group.MapAdminSeasonManagementEndpoints();
|
||||
group.MapAdminModerationEndpoints();
|
||||
group.MapAdminTeamEndpoints();
|
||||
|
||||
return app;
|
||||
}
|
||||
|
||||
private static async ValueTask<object?> RequireAdminWorkspaceRole(
|
||||
EndpointFilterInvocationContext context,
|
||||
EndpointFilterDelegate next)
|
||||
{
|
||||
var session = AdminEndpointConventions.CurrentSession(context.HttpContext);
|
||||
if (!AdminRoles.CanManageAdminWorkspace(session.Role))
|
||||
{
|
||||
return Results.Json(new { message = "This admin area requires an admin or owner role." }, statusCode: StatusCodes.Status403Forbidden);
|
||||
}
|
||||
|
||||
return await next(context);
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user