From a8f8c337936e71d649db7a1bfe4ef05a6552242e Mon Sep 17 00:00:00 2001 From: Mia Winter Date: Fri, 2 Feb 2024 16:36:34 +0100 Subject: [PATCH] fixed Article not viewable by logged in users without admin permissions --- Wave/Components/Pages/ArticleView.razor | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/Wave/Components/Pages/ArticleView.razor b/Wave/Components/Pages/ArticleView.razor index 300a5ec..dba7b9a 100644 --- a/Wave/Components/Pages/ArticleView.razor +++ b/Wave/Components/Pages/ArticleView.razor @@ -109,6 +109,11 @@ private Article GetArticleProtected(ClaimsPrincipal principal) { if (Article is null) throw new ApplicationException("Article not found."); + // The Article is publicly available + if (Article.Status >= ArticleStatus.Published && Article.PublishDate <= DateTimeOffset.UtcNow) { + return Article; + } + // Admins always get access if (principal.IsInRole("Admin")) { return Article;