问将ID传递给控制器一次，并让所有控制器方法记住布尔检查

EN

[Route("api/[controller]")]
[ApiController]
public class EngineController : ControllerBase
{
    private readonly engineMaker_Context _context;

    public EngineController(engineMaker_Context context)
    {
        _context = context;
    }

    // GET: api/Engine
    [HttpGet("{userID}")]
    public async Task<ActionResult<IEnumerable<Engine>>> GetEngine(string userID)
    {
        if(!CanAccessContent(userID))
        {
            return Unauthorized();
        }

        return await _context.Engine.ToListAsync();
    }

    // GET: api/Engine/123/5
    [HttpGet("{userID}/{id}")]
    public async Task<ActionResult<Engine>> GetEngine(string userID, string id)
    {
        if(!CanAccessContent(userID))
        {
            return Unauthorized();
        }

        var engine = await _context.Engine.FindAsync(id);

        if (engine == null)
        {
            return NotFound();
        }

        return engine;
    }

    // PUT: api/Engine/123/5
    [HttpPut("{userID}/{id}")]
    public async Task<IActionResult> PutEngine(string userID, string id, Engine engine)
    {

        if(!CanAccessContent(userID))
        {
            return Unauthorized();
        }


        if (id != engine.ObjectId)
        {
            return BadRequest();
        }

        _context.Entry(engine).State = EntityState.Modified;

        try
        {
            await _context.SaveChangesAsync();
        }
        catch (DbUpdateConcurrencyException)
        {
            if (!EngineExists(id))
            {
                return NotFound();
            }
            else
            {
                throw;
            }
        }

        return NoContent();
    }

    private bool CanAccessContent(string userID)
    {
        return _context.AllowedUsers.Any(e => e.UserId == userID);
    }
}