Implement authorization in UserController - Githubissues

Jerkinator / secondRoll

0 stars 0 forks source link

Implement authorization in UserController #99

Open Vurpas opened 5 months ago

Vurpas commented 5 months ago

Make sure that only the user that is logged in can update/get/delete things on only their own profile.

[x] Create authorization so that a user can only put/delete something on his own wishlist when logged in
[ ] Create restriction so a user can't add the same game more than once to wishlist
[x] Authorisation when user asks to see his/her profile to check for logged in username
[ ] A user should not be able to post a rating on his own profile
[ ] Create appropriate responses for all the mappings.
[ ] test in postman

TEMPORARILY ON HOLD - Too much work to refactor all the controllers with username instead of Id's.