feat(back-end): allow only the administrator to register other employees

CarlosPavajeau · May 28, 2021 · 6f5e0ba · 6f5e0ba
1 parent c52c8d2
commit 6f5e0ba
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/Kaizen/Controllers/EmployeesController.cs b/Kaizen/Controllers/EmployeesController.cs
@@ -136,6 +136,7 @@ public async Task<ActionResult<EmployeeViewModel>> PutEmployee(string id, Employ
         }
 
         [HttpPost]
+        [Authorize(Roles = "Administrator")]
         public async Task<ActionResult<EmployeeViewModel>> PostEmployee(EmployeeInputModel employeeModel)
         {
             EmployeeCharge employeeCharge = await _employeesRepository.GetAllEmployeeCharges()