Login authorization

Question

Guys I have access authorization login, only when I execute the authorization it deletes the previous one and stays the current one. For example: I have the user login (basic), to execute an action the user needs to be released by a login (Administrator). I am doing this code below. But when I run it , it is logged in as Login (Administrator) and no longer as login (basic).

if (LoginUsuárioCache.Cargo == FuncionárioCargo.Administrador)
{
    ConexaoLeituraBanco conexaoLeituraBanco = new ConexaoLeituraBanco();
    using (var connection = conexaoLeituraBanco.GetConnection())
    {
       connection.Open();
       using (MySqlCommand commad = new MySqlCommand())
       {                                    
            commad.Connection = connection; 
            commad.CommandText = "UPDATE pdv_historico SET sangria = sangria"; 
            commad.Parameters.AddWithValue("sangria", sangria);
            commad.CommandType = CommandType.Text;
            MySqlDataReader reader = commad.ExecuteReader();
            connection.Close();
            this.Close();
       }                                                               
    }
}                                   

         

Answer 1

Your UPDATE does not have WHERE. This affects all table records.

"UPDATE pdv_historico SET sangria = sangria"

You should check according to your logic, and pass the appropriate ID (or other field) as clause. Exemplifying in a very basic way:

SqlParameter param  = new SqlParameter();
param.ParameterName = "@IdUsuario";
param.Value         = usuario.Id;

"UPDATE pdv_historico SET sangria = sangria WHERE IDUsuario=@IdUsuario"