Subject Auth fixes

Author: tibitoth

src/Ahk.GradeManagement/Ahk.GradeManagement.Api/Controllers/CourseController.cs

@@ -9,7 +9,7 @@
 
 namespace Ahk.GradeManagement.Api.Controllers;
 
-//[Authorize]
+[Authorize]
 [Route("api/courses")]
 [ApiController]
 public class CourseController(CourseService courseService)
@@ -44,7 +44,7 @@ public override async Task<CourseResponse> CreateAsync(CourseRequest requestDto)
 
     [HttpGet("{id:long}/exercises")]
     [ProducesResponseType(StatusCodes.Status200OK)]
-    //[Authorize(Policy = DemonstratorOnSubjectRequirement.PolicyName)]
+    [Authorize(Policy = DemonstratorOnSubjectRequirement.PolicyName)]
     public async Task<IEnumerable<ExerciseResponse>> GetAllExercisesByIdAsync([FromRoute] long id)
     {
         return await courseService.GetAllExercisesByIdAsync(id);

src/Ahk.GradeManagement/Ahk.GradeManagement.Api/Controllers/SubjectController.cs

@@ -69,8 +69,7 @@ public async Task<List<User>> AddTeacherToSubjectByIdAsync([FromRoute] long subj
     [HttpDelete("{subjectId:long}/teachers/{teacherId:long}")]
     [ProducesResponseType(StatusCodes.Status204NoContent)]
     [Authorize(Policy = TeacherOnSubjectRequirement.PolicyName)]
-    public async Task<ActionResult> DeleteTeacherFromSubjectByIdAsync([FromRoute] long subjectId,
-        [FromRoute] long teacherId)
+    public async Task<ActionResult> DeleteTeacherFromSubjectByIdAsync([FromRoute] long subjectId, [FromRoute] long teacherId)
     {
         await subjectService.DeleteTeacherFromSubjectByIdAsync(subjectId, teacherId);
         return NoContent();

src/Ahk.GradeManagement/Ahk.GradeManagement.Bll/Services/SubjectService.cs

@@ -136,7 +136,8 @@ public async Task<SubjectResponse> CreateAsync(SubjectRequest requestDto)
             gradeManagementDbContext.SubjectTeacher.Add(new Dal.Entities.SubjectTeacher
             {
                 SubjectId = subjectEntity.SubjectId,
-                UserId = teacher.Id
+                UserId = teacher.Id,
+                Role = UserRoleOnSubject.Teacher,
             });
         }
 
@@ -186,7 +187,8 @@ public async Task<List<User>> AddTeacherToSubjectByIdAsync(long subjectId, long
         gradeManagementDbContext.SubjectTeacher.Add(new Dal.Entities.SubjectTeacher
         {
             SubjectId = subjectEntity.SubjectId,
-            UserId = teacherEntity.Id
+            UserId = teacherEntity.Id,
+            Role = UserRoleOnSubject.Teacher,
         });
 
         await gradeManagementDbContext.SaveChangesAsync();