public ActionResult Edit(EditCaseViewModel vm) { userID = User.Identity.GetUserId(); Case c = db.Cases.Find(vm.Id); bool badAa = db.Cases.Any(x => x.Aa == vm.Aa && x.Id != vm.Id && x.UserId == userID); if (!ModelState.IsValid || c == null || c.UserId != userID || badAa) { vm.PrepareLists(userID); return(View(vm)); } c.Update(vm); db.SaveChanges(); return(RedirectToAction("Index")); }
public ActionResult Edit(int?id) { userID = User.Identity.GetUserId(); if (id == null) { Debug.Print("error"); return(new HttpStatusCodeResult(HttpStatusCode.BadRequest)); } Case caseToChange = db.Cases.Find(id); if (caseToChange == null || caseToChange.UserId != userID) { return(HttpNotFound()); } EditCaseViewModel oldCase = new EditCaseViewModel(); oldCase.Update(caseToChange); oldCase.PrepareLists(userID); return(View(oldCase)); }