Include Roles in [RequiresAnyRole] attribute when scanning for Roles …

…used
ServiceStack · Nov 28, 2018 · c4efdfa · c4efdfa
1 parent afff7d7
commit c4efdfa
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/src/ServiceStack/Auth/AspNetWindowsAuthProvider.cs b/src/ServiceStack/Auth/AspNetWindowsAuthProvider.cs
@@ -40,6 +40,13 @@ public AspNetWindowsAuthProvider(IAppHost appHost)
                     .SelectMany(x => x.RequiredRoles);
 
                 requiredRoles.Each(x => AllRoles.AddIfNotExists(x));
+
+                var requireAnyRoles = host.Metadata.OperationsMap
+                    .SelectMany(x => x.Key.AllAttributes<RequiresAnyRoleAttribute>()
+                        .Concat(x.Value.ServiceType.AllAttributes<RequiresAnyRoleAttribute>()))
+                    .SelectMany(x => x.RequiredRoles);
+
+                requireAnyRoles.Each(x => AllRoles.AddIfNotExists(x));
             });
         }