public async Task <IActionResult> AddUser([FromBody] UpsertUserParams ps)
{
if (!await _permissionService.HasGlobalPermissionAsync(Permission.Admin))
{
return(StatusCode(403, "You have no permission to add user."));
}
return(Ok(await _service.AddUserAsync(ps)));
}
public async Task <IActionResult> UpdateUser([FromRoute] string username, [FromBody] UpsertUserParams ps)
{
if (!(await _permissionService.HasGlobalPermissionAsync(Permission.Admin) || _user.Username == username))
{
return(StatusCode(403, "You have no permission to update this user."));
}
ps.Username = username;
ps.Password = (await _service.GetUserAsync(username)).Password;
return(Ok(await _service.UpdateUserAsync(ps)));
}
