diff --git a/src/comissions.app.api/Controllers/Admin/AdminSellerRequestsController.cs b/src/comissions.app.api/Controllers/Admin/AdminSellerRequestsController.cs index 38f6a89..8264c91 100644 --- a/src/comissions.app.api/Controllers/Admin/AdminSellerRequestsController.cs +++ b/src/comissions.app.api/Controllers/Admin/AdminSellerRequestsController.cs @@ -29,7 +29,6 @@ public class AdminArtistRequestsController : Controller /// The amount of records to return. /// A list of seller profile requests [HttpGet] - [Authorize("read:seller-profile-request")] public async Task GetArtistRequests(int offset = 0, int pageSize = 10) { var requests = _dbContext.ArtistRequests.Skip(offset).Take(pageSize).ToList(); @@ -42,7 +41,6 @@ public class AdminArtistRequestsController : Controller /// /// The number of requests. [HttpGet] - [Authorize("read:seller-profile-request")] [Route("Count")] public async Task GetArtistRequestsCount() { @@ -56,7 +54,6 @@ public class AdminArtistRequestsController : Controller /// The ID of the user to accept the request for. /// The new seller profile. [HttpPut] - [Authorize("write:seller-profile-request")] [Route("{userId}")] public async Task AcceptArtistRequest(string userId) { diff --git a/src/comissions.app.api/Program.cs b/src/comissions.app.api/Program.cs index 534e36f..1113265 100644 --- a/src/comissions.app.api/Program.cs +++ b/src/comissions.app.api/Program.cs @@ -12,7 +12,7 @@ using Microsoft.EntityFrameworkCore; using Microsoft.Extensions.FileProviders; using Microsoft.IdentityModel.Tokens; using Microsoft.OpenApi.Models; - + var builder = WebApplication.CreateBuilder(args); // Add services to the container. @@ -98,16 +98,19 @@ builder.Services.AddAuthorization(options => options.AddPolicy("read:user", policy => policy.Requirements.Add(new HasScopeRequirement("read:user", builder.Configuration.GetValue("Auth0:Domain")))); + options.AddPolicy("write:user", policy => policy.Requirements.Add(new HasScopeRequirement("write:user", builder.Configuration.GetValue("Auth0:Domain")))); options.AddPolicy("read:artist", policy => policy.Requirements.Add(new HasScopeRequirement("read:artist", builder.Configuration.GetValue("Auth0:Domain")))); + options.AddPolicy("write:artist", policy => policy.Requirements.Add(new HasScopeRequirement("write:artist", builder.Configuration.GetValue("Auth0:Domain")))); options.AddPolicy("read:request", policy => policy.Requirements.Add(new HasScopeRequirement("read:request", builder.Configuration.GetValue("Auth0:Domain")))); + options.AddPolicy("write:request", policy => policy.Requirements.Add(new HasScopeRequirement("write:request", builder.Configuration.GetValue("Auth0:Domain")))); });