From 30dac1df5e737d7d67fac08b15d1c95b94e9564f Mon Sep 17 00:00:00 2001
From: Alper Ebicoglu <alperonline@hotmail.com>
Date: Sun, 12 Aug 2018 18:55:51 +0300
Subject: [PATCH] Added authorize attribute for new user app service methods.

---
 .../Volo/Abp/Identity/IdentityUserAppService.cs          | 4 +++-
 .../Volo/Abp/Identity/IdentityUserController.cs          | 9 ++-------
 2 files changed, 5 insertions(+), 8 deletions(-)

diff --git a/modules/identity/src/Volo.Abp.Identity.Application/Volo/Abp/Identity/IdentityUserAppService.cs b/modules/identity/src/Volo.Abp.Identity.Application/Volo/Abp/Identity/IdentityUserAppService.cs
index 4fced6274b..3f28afb3f5 100644
--- a/modules/identity/src/Volo.Abp.Identity.Application/Volo/Abp/Identity/IdentityUserAppService.cs
+++ b/modules/identity/src/Volo.Abp.Identity.Application/Volo/Abp/Identity/IdentityUserAppService.cs
@@ -17,7 +17,7 @@ namespace Volo.Abp.Identity
         private readonly IPermissionAppServiceHelper _permissionAppServiceHelper;
 
         public IdentityUserAppService(
-            IdentityUserManager userManager, 
+            IdentityUserManager userManager,
             IIdentityUserRepository userRepository,
             IPermissionAppServiceHelper permissionAppServiceHelper)
         {
@@ -113,6 +113,7 @@ namespace Volo.Abp.Identity
             await _permissionAppServiceHelper.UpdateAsync(UserPermissionValueProvider.ProviderName, id.ToString(), input);
         }
 
+        [Authorize(IdentityPermissions.Users.Default)]
         public async Task<IdentityUserDto> FindByUsernameAsync(string username)
         {
             return ObjectMapper.Map<IdentityUser, IdentityUserDto>(
@@ -120,6 +121,7 @@ namespace Volo.Abp.Identity
             );
         }
 
+        [Authorize(IdentityPermissions.Users.Default)]
         public async Task<IdentityUserDto> FindByEmailAsync(string email)
         {
             return ObjectMapper.Map<IdentityUser, IdentityUserDto>(
diff --git a/modules/identity/src/Volo.Abp.Identity.HttpApi/Volo/Abp/Identity/IdentityUserController.cs b/modules/identity/src/Volo.Abp.Identity.HttpApi/Volo/Abp/Identity/IdentityUserController.cs
index eb2e448c9c..761f98d6bf 100644
--- a/modules/identity/src/Volo.Abp.Identity.HttpApi/Volo/Abp/Identity/IdentityUserController.cs
+++ b/modules/identity/src/Volo.Abp.Identity.HttpApi/Volo/Abp/Identity/IdentityUserController.cs
@@ -64,16 +64,11 @@ namespace Volo.Abp.Identity
             return _userAppService.UpdatePermissionsAsync(id, input);
         }
 
+        //todo: add authorize attrbutes on the corresponding methods.
         [HttpGet]
         public virtual Task<IdentityUserDto> FindByUsernameAsync(string username)
         {
-            if (CurrentUser.Id.HasValue)
-            {
-                return _userAppService.FindByUsernameAsync(username);
-            }
-
-            Console.WriteLine("Not logged in!");
-            throw new UnauthorizedAccessException();
+            return _userAppService.FindByUsernameAsync(username);
         }
 
         [HttpGet]