From 0dd0c1bf4ce5fa6a942b88ee91d5c81d8c76584a Mon Sep 17 00:00:00 2001
From: "a.beging@eas-solutions.de" <a.beging@eas-solutions.de>
Date: Wed, 29 Apr 2026 15:54:23 +0200
Subject: [PATCH] Enhance AuditView and NavMenu: restrict access for non-admin
 users in InitializeDataAsync and OnReadData methods, and refactor NavMenu
 structure for better readability

Co-authored-by: Copilot <copilot@github.com>
---
 FoodsharingSiegen.Server/Pages/AuditView.razor.cs |  4 ++++
 FoodsharingSiegen.Server/Shared/NavMenu.razor     | 14 +++++++-------
 2 files changed, 11 insertions(+), 7 deletions(-)

diff --git a/FoodsharingSiegen.Server/Pages/AuditView.razor.cs b/FoodsharingSiegen.Server/Pages/AuditView.razor.cs
index 89e4076..f3e003d 100644
--- a/FoodsharingSiegen.Server/Pages/AuditView.razor.cs
+++ b/FoodsharingSiegen.Server/Pages/AuditView.razor.cs
@@ -1,5 +1,6 @@
 using Blazorise.DataGrid;
 using FoodsharingSiegen.Contracts.Entity;
+using FoodsharingSiegen.Contracts.Helper;
 using FoodsharingSiegen.Server.Data.Service;
 using Microsoft.AspNetCore.Components;
 
@@ -39,6 +40,7 @@ namespace FoodsharingSiegen.Server.Pages
         /// <inheritdoc />
         protected override Task InitializeDataAsync()
         {
+            if (!CurrentUser.IsAdmin()) NavigationManager.NavigateTo("/");
             return Task.CompletedTask;
         }
 
@@ -52,6 +54,8 @@ namespace FoodsharingSiegen.Server.Pages
         /// <param name="e">The params</param>
         private async Task OnReadData(DataGridReadDataEventArgs<Audit> e)
         {
+            if (!CurrentUser.IsAdmin()) return;
+
             var countLoad = await AuditService?.GetCount()!;
             if (countLoad.Success)
                 TotalAudits = countLoad.Data;
diff --git a/FoodsharingSiegen.Server/Shared/NavMenu.razor b/FoodsharingSiegen.Server/Shared/NavMenu.razor
index f877225..e47457d 100644
--- a/FoodsharingSiegen.Server/Shared/NavMenu.razor
+++ b/FoodsharingSiegen.Server/Shared/NavMenu.razor
@@ -64,15 +64,15 @@
                 </NavLink>
             </div>
         </div>
-    }
 
-    <div class="nav-item px-3">
-        <div @onclick="NavLinkClickedAsync">
-            <NavLink class="nav-link" href="audit" Match="NavLinkMatch.All">
-                <span class="fa-solid fa-clock-rotate-left mr-2" aria-hidden="true" style="font-size: 1.4em;"></span> Aktivitäten
-            </NavLink>
+        <div class="nav-item px-3">
+            <div @onclick="NavLinkClickedAsync">
+                <NavLink class="nav-link" href="audit" Match="NavLinkMatch.All">
+                    <span class="fa-solid fa-clock-rotate-left mr-2" aria-hidden="true" style="font-size: 1.4em;"></span> Aktivitäten
+                </NavLink>
+            </div>
         </div>
-    </div>
+    }
 
     <div class="flex-grow-1"></div>