public void ApiDeleteNote( string id, string apiKey ) { using ( Rock.Data.UnitOfWorkScope uow = new Rock.Data.UnitOfWorkScope() ) { Rock.CMS.UserService userService = new Rock.CMS.UserService(); Rock.CMS.User user = userService.Queryable().Where( u => u.ApiKey == apiKey ).FirstOrDefault(); if (user != null) { uow.objectContext.Configuration.ProxyCreationEnabled = false; Rock.Core.NoteService NoteService = new Rock.Core.NoteService(); Rock.Core.Note Note = NoteService.Get( int.Parse( id ) ); if ( Note.Authorized( "Edit", user ) ) { NoteService.Delete( Note, user.PersonId ); NoteService.Save( Note, user.PersonId ); } else throw new WebFaultException<string>( "Not Authorized to Edit this Note", System.Net.HttpStatusCode.Forbidden ); } else throw new WebFaultException<string>( "Invalid API Key", System.Net.HttpStatusCode.Forbidden ); } }
public void DeleteNote( string id ) { var currentUser = Rock.CMS.UserService.GetCurrentUser(); if ( currentUser == null ) throw new WebFaultException<string>("Must be logged in", System.Net.HttpStatusCode.Forbidden ); using ( Rock.Data.UnitOfWorkScope uow = new Rock.Data.UnitOfWorkScope() ) { uow.objectContext.Configuration.ProxyCreationEnabled = false; Rock.Core.NoteService NoteService = new Rock.Core.NoteService(); Rock.Core.Note Note = NoteService.Get( int.Parse( id ) ); if ( Note.Authorized( "Edit", currentUser ) ) { NoteService.Delete( Note, currentUser.PersonId ); NoteService.Save( Note, currentUser.PersonId ); } else throw new WebFaultException<string>( "Not Authorized to Edit this Note", System.Net.HttpStatusCode.Forbidden ); } }