public async Task <IActionResult> PostAsync(ContentActivity contentActivity) { var node = contentActivity.Node; var userId = HttpContext.User.FindFirstValue(ClaimTypes.NameIdentifier); var allowed = await _securityService.IsAllowedAsync( HttpContext.User, node.Module, node.Type, Actions.Add); if (!allowed) { throw new Exception("User is not allowed to perform the action."); } node.CreatedBy = userId; var id = await _nodeService.AddAsync(node); var message = contentActivity.Message; await _activityService.AddAsync(id, message, userId); return(Ok(id)); }