fx

Altinn · Feb 16, 2025 · a6c3a33 · a6c3a33
1 parent dcc5ee7
commit a6c3a33
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 2 deletions.
diff --git a/...n.Application/Features/V1/EndUser/DialogTransmissions/Queries/Get/GetTransmissionQuery.cs b/...n.Application/Features/V1/EndUser/DialogTransmissions/Queries/Get/GetTransmissionQuery.cs
@@ -83,7 +83,7 @@ public async Task<GetTransmissionResult> Handle(GetTransmissionQuery request,
 
         if (dto.IsAuthorized) return dto;
 
-        var urls = transmission.Attachments.SelectMany(a => a.Urls).ToList();
+        var urls = dto.Attachments.SelectMany(a => a.Urls).ToList();
         foreach (var url in urls)
         {
             url.Url = Constants.UnauthorizedUri;

diff --git a/...ication/Features/V1/EndUser/DialogTransmissions/Queries/Search/SearchTransmissionQuery.cs b/...ication/Features/V1/EndUser/DialogTransmissions/Queries/Search/SearchTransmissionQuery.cs
@@ -1,4 +1,5 @@
 using AutoMapper;
+using Digdir.Domain.Dialogporten.Application.Common.Authorization;
 using Digdir.Domain.Dialogporten.Application.Common.ReturnTypes;
 using Digdir.Domain.Dialogporten.Application.Externals;
 using Digdir.Domain.Dialogporten.Application.Externals.AltinnAuthorization;
@@ -68,6 +69,21 @@ public async Task<SearchTransmissionResult> Handle(SearchTransmissionQuery reque
             return new EntityDeleted<DialogEntity>(request.DialogId);
         }
 
-        return _mapper.Map<List<TransmissionDto>>(dialog.Transmissions);
+        var dto = _mapper.Map<List<TransmissionDto>>(dialog.Transmissions);
+
+        foreach (var transmission in dto)
+        {
+            transmission.IsAuthorized = authorizationResult.HasReadAccessToDialogTransmission(transmission.AuthorizationAttribute);
+
+            if (transmission.IsAuthorized) continue;
+
+            var urls = transmission.Attachments.SelectMany(a => a.Urls).ToList();
+            foreach (var url in urls)
+            {
+                url.Url = Constants.UnauthorizedUri;
+            }
+        }
+
+        return dto;
     }
 }