public async Task <IActionResult> DeleteAlbumPicture(int albumId, int pictureId) { var album = await _pictureService.AlbumByIdAsync(albumId); if (album == null) { return(BadRequest()); } if (album.User.UserName != User.Identity.Name && !User.IsInRole(GlobalConstants.UserRole.Administrator)) { return(Forbid("Access denied")); } var result = await _pictureService.DeleteAlbumPictureAsync(pictureId); if (!result) { return(BadRequest()); } return(Ok()); }