56 lines
2.1 KiB
C#
56 lines
2.1 KiB
C#
using MediatR;
|
|
using Microsoft.AspNetCore.Authorization;
|
|
using Microsoft.AspNetCore.Mvc;
|
|
using mws.backend.dotnet.application.Common;
|
|
using mws.backend.dotnet.application.Permissions;
|
|
|
|
namespace mws.backend.dotnet.api.Controllers;
|
|
|
|
[ApiController]
|
|
[Route("api/settings/permission")]
|
|
[Authorize]
|
|
public class PermissionsController(ISender sender, IPermissionService permissions) : ControllerBase
|
|
{
|
|
[HttpGet("menu")]
|
|
public async Task<ActionResult<List<MenuItemDto>>> GetMenu(CancellationToken ct)
|
|
{
|
|
return Ok(await permissions.GetMenuAsync(User.GetUserId(), ct));
|
|
}
|
|
|
|
[HttpGet]
|
|
public async Task<ActionResult<PagedResult<RoleDto>>> GetAll([FromQuery] int page = 1, [FromQuery] int pageSize = 20, CancellationToken ct = default)
|
|
{
|
|
await permissions.EnsureAsync(User.GetUserId(), "permissions", PermissionAction.View, ct);
|
|
return Ok(await sender.Send(new GetRolesQuery(page, pageSize), ct));
|
|
}
|
|
|
|
[HttpGet("{id:guid}")]
|
|
public async Task<ActionResult<RoleDto>> Get(Guid id, CancellationToken ct)
|
|
{
|
|
await permissions.EnsureAsync(User.GetUserId(), "permissions", PermissionAction.View, ct);
|
|
return Ok(await sender.Send(new GetRoleQuery(id), ct));
|
|
}
|
|
|
|
[HttpPost]
|
|
public async Task<ActionResult<RoleDto>> Create([FromBody] SaveRoleRequest request, CancellationToken ct)
|
|
{
|
|
await permissions.EnsureAsync(User.GetUserId(), "permissions", PermissionAction.Create, ct);
|
|
return Ok(await sender.Send(new CreateRoleCommand(request), ct));
|
|
}
|
|
|
|
[HttpPut("{id:guid}")]
|
|
public async Task<ActionResult<RoleDto>> Update(Guid id, [FromBody] SaveRoleRequest request, CancellationToken ct)
|
|
{
|
|
await permissions.EnsureAsync(User.GetUserId(), "permissions", PermissionAction.Edit, ct);
|
|
return Ok(await sender.Send(new UpdateRoleCommand(id, request), ct));
|
|
}
|
|
|
|
[HttpDelete("{id:guid}")]
|
|
public async Task<IActionResult> Delete(Guid id, CancellationToken ct)
|
|
{
|
|
await permissions.EnsureAsync(User.GetUserId(), "permissions", PermissionAction.Delete, ct);
|
|
await sender.Send(new DeleteRoleCommand(id), ct);
|
|
return NoContent();
|
|
}
|
|
}
|