public async Task<IActionResult> Put([FromBody] ProductDto model) { if (!await _permissionService.Authorize(PermissionSystemName.Products)) return Forbid(); if (ModelState.IsValid) { model = await _productApiService.UpdateProduct(model); return Ok(); } return BadRequest(ModelState); }