X-Git-Url: https://git.dlugolecki.net.pl/?a=blobdiff_plain;f=Projects%2FControllers%2FProjectsController.cs;h=ab93cc85bce70c71f4743b01ca85b7a49f649323;hb=ebce2754ea0c114789c3f5ff6494ba390f2492ab;hp=38271281c663b6c280ee06a6e1ec3d5077f7431f;hpb=5e0fe0cb10f848f46dd875350ca51198e28e0c74;p=wsti_pai.git

diff --git a/Projects/Controllers/ProjectsController.cs b/Projects/Controllers/ProjectsController.cs
index 3827128..ab93cc8 100644
--- a/Projects/Controllers/ProjectsController.cs
+++ b/Projects/Controllers/ProjectsController.cs
@@ -16,7 +16,7 @@ namespace Projects.Models
         // GET: Projects
         public ActionResult Index()
         {
-            var projects = db.Projects.Include(p => p.ProjectUser);
+            var projects = db.Projects.Include(p => p.User);
             return View(projects.ToList());
         }
 
@@ -36,31 +36,36 @@ namespace Projects.Models
         }
 
         // GET: Projects/Create
+        [Authorize(Roles = "admin")]
         public ActionResult Create()
         {
-            ViewBag.user_id = new SelectList(db.ProjectUsers, "id", "login");
+            ViewBag.user_id = new SelectList(db.Users, "id", "login");
             return View();
         }
 
         // POST: Projects/Create
         // To protect from overposting attacks, please enable the specific properties you want to bind to, for 
         // more details see http://go.microsoft.com/fwlink/?LinkId=317598.
+        [Authorize(Roles = "admin")]
         [HttpPost]
         [ValidateAntiForgeryToken]
-        public ActionResult Create([Bind(Include = "id,user_id,name,description,created_at,updated_at")] Project project)
+        public ActionResult Create([Bind(Include = "id,user_id,name,description")] Project project)
         {
             if (ModelState.IsValid)
             {
+                project.created_at = DateTime.Now;
+                project.updated_at = DateTime.Now;
                 db.Projects.Add(project);
                 db.SaveChanges();
                 return RedirectToAction("Index");
             }
 
-            ViewBag.user_id = new SelectList(db.ProjectUsers, "id", "login", project.user_id);
+            ViewBag.user_id = new SelectList(db.Users, "id", "login", project.user_id);
             return View(project);
         }
 
         // GET: Projects/Edit/5
+        [Authorize(Roles = "admin")]
         public ActionResult Edit(int? id)
         {
             if (id == null)
@@ -72,28 +77,31 @@ namespace Projects.Models
             {
                 return HttpNotFound();
             }
-            ViewBag.user_id = new SelectList(db.ProjectUsers, "id", "login", project.user_id);
+            ViewBag.user_id = new SelectList(db.Users, "id", "login", project.user_id);
             return View(project);
         }
 
         // POST: Projects/Edit/5
         // To protect from overposting attacks, please enable the specific properties you want to bind to, for 
         // more details see http://go.microsoft.com/fwlink/?LinkId=317598.
+        [Authorize(Roles = "admin")]
         [HttpPost]
         [ValidateAntiForgeryToken]
-        public ActionResult Edit([Bind(Include = "id,user_id,name,description,created_at,updated_at")] Project project)
+        public ActionResult Edit([Bind(Include = "id,user_id,name,description,created_at")] Project project)
         {
             if (ModelState.IsValid)
             {
+                project.updated_at = DateTime.Now;
                 db.Entry(project).State = EntityState.Modified;
                 db.SaveChanges();
                 return RedirectToAction("Index");
             }
-            ViewBag.user_id = new SelectList(db.ProjectUsers, "id", "login", project.user_id);
+            ViewBag.user_id = new SelectList(db.Users, "id", "login", project.user_id);
             return View(project);
         }
 
         // GET: Projects/Delete/5
+        [Authorize(Roles = "admin")]
         public ActionResult Delete(int? id)
         {
             if (id == null)
@@ -109,6 +117,7 @@ namespace Projects.Models
         }
 
         // POST: Projects/Delete/5
+        [Authorize(Roles = "admin")]
         [HttpPost, ActionName("Delete")]
         [ValidateAntiForgeryToken]
         public ActionResult DeleteConfirmed(int id)