public async Task <MProductMedia> AddProductMediaAsync(MProductMedia media)
{
const string sql = "INSERT INTO dbo.ProductMedias (ProductId, YoutubeUrl, ImageId) " +
"OUTPUT INSERTED.Id, INSERTED.ProductId, INSERTED.YoutubeUrl, INSERTED.ImageId " +
"VALUES (@ProductId, @YoutubeUrl, @ImageId);";
return(await connection.QuerySingleAsync <MProductMedia>(sql, media));
}
public async Task <IActionResult> PostProductMediaAsync([FromBody] MProductMedia media)
{
if (!User.IsInRole(RoleConstants.AdminRoleId) && !await productsRepository.IsProductSellerAsync(media.ProductId, int.Parse(User.Identity.Name)))
{
return(BadRequest());
}
return(Ok(await productsRepository.AddProductMediaAsync(media)));
}
