public async Task <IActionResult> AddAsync(PipelineTaskViewModel task)
{
if (ModelState.IsValid)
{
await _taskService.CreateAsync(task, GetCurrentUserId());
return(RedirectToAction("Index"));
}
return(View(task));
}
public async Task <IActionResult> EditAsync(PipelineTaskViewModel task)
{
if (ModelState.IsValid)
{
//we have no guarantee that task.UserId was not spoofed
var taskForAuth = await _taskService.GetAsync(task.Id);
if (task == null)
{
return(new NotFoundResult());
}
if (!await CheckPermissionAsync(taskForAuth))
{
return(new ChallengeResult());
}
await _taskService.UpdateAsync(task);
return(RedirectToAction("Show", new { id = task.Id }));
}
return(View(task));
}
