AdminUsersFeature Events

[Pinox]

Admin UI : Trying to stop a user in Admin role to lock himself out of the application by using the following event:

feature.OnBeforeUpdateUser = async (request, user) =>
{
    var userManager = request.TryResolve<UserManager<ApplicationUser>>();
    var currentUser = request.GetSession().UserAuthName;

    if (user != null && userManager != null)
    {
        if (await userManager.IsInRoleAsync(user, "Admin") && user.LockoutEnd.HasValue)
        {
            user.LockoutEnd = null;
            throw new ArgumentException("Admin user cannot be locked out.", "");

            //throw new HttpError(HttpStatusCode.BadRequest, "Admin user cannot be locked out.");
        }
    }
};

Running the Admin-UI I get an error message but the database still updates. How do I stop the execution of the update ?

Documentation is not clear either:

Thanks in advance.

[mythz]

Running the Admin-UI I get an error message but the database still updates.

This is unlikely since the filter is executed before the user is updated which an Exception in the filter would prevent

https://github.com/ServiceStack/ServiceStack/blob/f7e24245ebe18abdd62bec37b94b579c46c63430/ServiceStack/src/ServiceStack/Admin/AdminUsersService.cs#L165-L171

I'd recommend debugging into the framework sources so you find out what's causing the update.

[Pinox]

Hi @mythz

The problem is here you have not defined any events for the Lock User button , so it bypasses the update method altogether.

We need something like an feature.OnBeforeUserLocked() event for this to work.

My code will not work as I cannot hook into the event when the button was pressed. There is no way to override the button event as the Locked User is saved before the Update event. Therefor my code is in the wrong event altogether but there is no other event to use.

[mythz]

The Update events should now be fired for every User Update operation in the latest v8.6.1+ that's now available in the latest pre release packages

[mythz]

Here's the source code for the AdminUpdateUser API. If you already have v8.6.1 installed you'll need to clear your NuGet packages cache to download the latest version.

[Pinox]

Sweet , works as expected !! 💯

[Pinox]

Hi @mythz

Currently when pressing the delete a user or update a user button then the grid updates automatically.

When you press "Lock User Button" then there is a database update but no visual feedback that the DB updated. When the database update at this point should the grid not also update otherwise the only way to see the updated value in the grid is too hit the "Update Button" again that does another "empty" update to the DB or you have to press refresh in the browser ?

[mythz]

The latest v8.6.1 changes the behavior of un/locking users to close the form and update the results.

[Pinox]

Thanks @mythz.

Instant feedback from UI, luv it !!