Fix TryCatchLearn#5: Delete unapproved photo not working

rewgoes · Feb 15, 2021 · f3c276d · f3c276d
1 parent 49b4d34
commit f3c276d
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/API/Controllers/UsersController.cs b/API/Controllers/UsersController.cs
@@ -117,7 +117,9 @@ public async Task<ActionResult> SetMainPhoto(int photoId)
         [HttpDelete("delete-photo/{photoId}")]
         public async Task<ActionResult> DeletePhoto(int photoId)
         {
-            var user = await _unitOfWork.UserRepository.GetUserByUsernameAsync(User.GetUsername());
+            var user = await _unitOfWork.UserRepository.GetUserByPhotoId(photoId);
+
+            if (user.UserName != User.GetUsername()) return Unauthorized("You cannot delete this photo");
 
             var photo = user.Photos.FirstOrDefault(x => x.Id == photoId);