public async Task <IActionResult> DeleteAlbumPicture(int albumId, int pictureId)
{
var album = await _pictureService.AlbumByIdAsync(albumId);
if (album == null)
{
return(BadRequest());
}
if (album.User.UserName != User.Identity.Name && !User.IsInRole(GlobalConstants.UserRole.Administrator))
{
return(Forbid("Access denied"));
}
var result = await _pictureService.DeleteAlbumPictureAsync(pictureId);
if (!result)
{
return(BadRequest());
}
return(Ok());
}
