admin/marco.pms.api
1
0
Fork 0
Code Issues Pull Requests 3 Actions Packages Projects Releases Wiki Activity

Removed hasProjectAccess check from document controller

Browse Source
This commit is contained in:
ashutosh.nehete 2025-10-01 10:55:00 +05:30
parent 040e7df32b
commit b3f54962ab
1 changed files with 14 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
Marco.Pms.Services/Controllers/DocumentController.cs
View File

@ -95,16 +95,16 @@ namespace Marco.Pms.Services.Controllers
return NotFound(ApiResponse<object>.ErrorResponse("Entity type not found", "Entity Type not found in database", 404));
}
// Project permission check
if (ProjectEntity == entityTypeId)
{
var hasProjectPermission = await _permission.HasProjectPermission(loggedInEmployee, entityId);
if (!hasProjectPermission)
{
_logger.LogWarning("Employee {EmployeeId} does not have project access for ProjectId {ProjectId}", loggedInEmployee.Id, entityId);
return StatusCode(403, ApiResponse<object>.ErrorResponse("Access Denied.", "You do not have permission to access project documents", 403));
}
}
//// Project permission check
//if (ProjectEntity == entityTypeId)
//{
// var hasProjectPermission = await _permission.HasProjectPermission(loggedInEmployee, entityId);
// if (!hasProjectPermission)
// {
// _logger.LogWarning("Employee {EmployeeId} does not have project access for ProjectId {ProjectId}", loggedInEmployee.Id, entityId);
// return StatusCode(403, ApiResponse<object>.ErrorResponse("Access Denied.", "You do not have permission to access project documents", 403));
// }
//}
// Employee validation
else if (EmployeeEntity == entityTypeId)
{
@ -1085,10 +1085,10 @@ namespace Marco.Pms.Services.Controllers
else if (entityType.Equals(ProjectEntity))
{
entityExists = await _context.Projects.AnyAsync(p => p.Id == oldAttachment.EntityId && p.TenantId == tenantId);
if (entityExists)
{
entityExists = await _permission.HasProjectPermission(loggedInEmployee, oldAttachment.EntityId);
}
//if (entityExists)
//{
// entityExists = await _permission.HasProjectPermission(loggedInEmployee, oldAttachment.EntityId);
//}
}
else
{