示例#1
0
        public async Task <IActionResult> DeleteComment(int blogId, int id, int cid)
        {
            Comment  c  = bprepository.GetComment(cid);
            BlogPost bp = bprepository.GetBlogPost(id);
            Blog     b  = brepository.get(blogId);

            c.Author = await userManager.FindByIdAsync(c.AuthorId);

            var isAuthorized = await auth.AuthorizeAsync(
                User, c.Author, UserOperations.UserRole);

            var isA = await auth.AuthorizeAsync(
                User, bp.Author, UserOperations.UserRole);

            var isB = await auth.AuthorizeAsync(
                User, b.User, UserOperations.UserRole);

            if (!isAuthorized.Succeeded)
            {
                if (!isA.Succeeded)
                {
                    if (!isB.Succeeded)
                    {
                        return(View("Ingentilgang"));
                    }
                    return(View("Ingentilgang"));
                }
                return(View("Ingentilgang"));
            }

            bprepository.DeleteComment(cid, id, User);
            TempData["message"] = "Kommentar slettet";
            return(RedirectToAction("BlogPost", new { @blogId = blogId, @id = id }));
        }