Continue to construct feature and tests.

1 files changed, 5 insertions, 0 deletions

diff --git a/Timeline/Controllers/UserDetailController.cs b/Timeline/Controllers/UserDetailController.cs
index ef13b462..9de9899e 100644
--- a/Timeline/Controllers/UserDetailController.cs
+++ b/Timeline/Controllers/UserDetailController.cs
@@ -4,6 +4,7 @@ using Timeline.Filters;
 using Timeline.Models.Validation;

 using Timeline.Services;

 using System.ComponentModel.DataAnnotations;

+using Microsoft.AspNetCore.Authorization;

 

 namespace Timeline.Controllers

 {

@@ -25,6 +26,8 @@ namespace Timeline.Controllers
         }

 

         [HttpPut("users/{username}/nickname")]

+        [Authorize]

+        [SelfOrAdmin]

         [CatchUserNotExistException]

         public async Task<ActionResult> PutNickname([FromRoute][Username] string username,

             [FromBody][StringLength(10, MinimumLength = 1)] string body)

@@ -34,6 +37,8 @@ namespace Timeline.Controllers
         }

 

         [HttpDelete("users/{username}/nickname")]

+        [Authorize]

+        [SelfOrAdmin]

         [CatchUserNotExistException]

         public async Task<ActionResult> DeleteNickname([FromRoute][Username] string username)

         {