public override void OnActionExecuting(ActionExecutingContext filterContext) { var manager = IocContainer.Get <IShopManager>(); var character = 0; var corporation = 0; if (filterContext.ActionArguments.ContainsKey("character")) { int.TryParse(filterContext.ActionArguments["character"].ToString(), out character); } if (filterContext.ActionArguments.ContainsKey("corporation")) { int.TryParse(filterContext.ActionArguments["corporation"].ToString(), out corporation); } else { object model; if (filterContext.ActionArguments.TryGetValue("request", out model) && model is CorporationBasedRequest) { corporation = ((CorporationBasedRequest)model).Corporation; } } if (!BillingHelper.IsAdmin(character) && !manager.HasAccessToCorporation(character, corporation)) { filterContext.Result = new StatusCodeResult(403); return; } base.OnActionExecuting(filterContext); }
public FullUserDto GetFullUser(int modelid) { var user = new FullUserDto(modelid) { Sin = Factory.Billing.GetBalance(modelid), Transfers = Factory.Billing.GetTransfers(modelid), Rents = Factory.Billing.GetRentas(modelid), Scoring = Factory.Scoring.GetFullScoring(modelid), IsAdmin = BillingHelper.IsAdmin(modelid) }; return(user); }
public override void OnActionExecuting(ActionExecutingContext filterContext) { var character = 0; if (filterContext.ActionArguments.ContainsKey("character")) { int.TryParse(filterContext.ActionArguments["character"].ToString(), out character); } if (!BillingHelper.IsAdmin(character)) { filterContext.Result = new StatusCodeResult(403); return; } base.OnActionExecuting(filterContext); }