public async Task <IActionResult> Post([FromBody] FinanceAccountCategory ctgy)
{
if (!ModelState.IsValid)
{
HIHAPIUtility.HandleModalStateError(ModelState);
}
// Check
if (!ctgy.IsValid(this._context) || !ctgy.HomeID.HasValue)
{
throw new BadRequestException("Inputted object IsValid failed");
}
// User
String usrName = String.Empty;
try
{
usrName = HIHAPIUtility.GetUserID(this);
if (String.IsNullOrEmpty(usrName))
{
throw new UnauthorizedAccessException();
}
}
catch
{
throw new UnauthorizedAccessException();
}
// Check whether User assigned with specified Home ID
var hms = _context.HomeMembers.Where(p => p.HomeID == ctgy.HomeID.Value && p.User == usrName).Count();
if (hms <= 0)
{
throw new UnauthorizedAccessException();
}
if (!ctgy.IsValid(this._context))
{
return(BadRequest());
}
ctgy.Createdby = usrName;
ctgy.CreatedAt = DateTime.Now;
_context.FinAccountCategories.Add(ctgy);
await _context.SaveChangesAsync();
return(Created(ctgy));
}
public async Task <IActionResult> Put([FromODataUri] int key, [FromBody] FinanceAccountCategory update)
{
if (!ModelState.IsValid)
{
HIHAPIUtility.HandleModalStateError(ModelState);
}
if (key != update.ID)
{
throw new BadRequestException("ID mismatched");
}
// User
String usrName = String.Empty;
try
{
usrName = HIHAPIUtility.GetUserID(this);
if (String.IsNullOrEmpty(usrName))
{
throw new UnauthorizedAccessException();
}
}
catch
{
throw new UnauthorizedAccessException();
}
// Check whether User assigned with specified Home ID
var hms = _context.HomeMembers.Where(p => p.HomeID == update.HomeID && p.User == usrName).Count();
if (hms <= 0)
{
throw new UnauthorizedAccessException();
}
if (!update.IsValid(this._context))
{
return(BadRequest());
}
update.UpdatedAt = DateTime.Now;
update.Updatedby = usrName;
_context.Entry(update).State = EntityState.Modified;
try
{
await _context.SaveChangesAsync();
}
catch (DbUpdateConcurrencyException exp)
{
if (!_context.FinAccountCategories.Any(p => p.ID == key))
{
return(NotFound());
}
else
{
throw new DBOperationException(exp.Message);
}
}
return(Updated(update));
}