Revize f5c0676a

Use ContextUtils in AuthorizationAttribute

Backend/Backend/Authentication/AuthorizationAttribute.cs

@@ -16 +16 @@
         MinimumRequiredPermissions = role;
     }
 
-    public AuthorizeAttribute()
-    {
-        MinimumRequiredPermissions = ERole.ANNOTATOR;
-    }
-
     public void OnAuthorization(AuthorizationFilterContext context)
     {
         // skip authorization if action is decorated with [AllowAnonymous] attribute
@@ -29 +24 @@
             return;
 
         // authorization
-        var user = (User?)context.HttpContext.Items["User"];
-        if (user == null)
+        var user = Utils.ContextUtils.GetClientInfo(context.HttpContext);
+        if (user == null || user.LoggedUser == null)
         {
             context.Result = new JsonResult(new { message = "Unauthorized" })
             {
@@ -38 +33 @@
             };
         }
 
-        if (MinimumRequiredPermissions > user.Role)
+        if (MinimumRequiredPermissions > user.LoggedUser.Role)
         {
             context.Result = new JsonResult(new { message = "Unauthorized" })
             {