// TODO breeze doesn't support this at the moment / coni2k - 31 Jul. '17
// [ConcurrencyValidator(typeof(ElementField))]
public async Task <IHttpActionResult> Delete(int key, Delta <ElementField> patch)
{
var elementField = await _resourcePoolManager.GetElementFieldSet(key, true, item => item.Element.ResourcePool).SingleOrDefaultAsync();
// Owner check: Entity must belong to the current user
var currentUserId = User.Identity.GetUserId <int>();
if (currentUserId != elementField.Element.ResourcePool.UserId)
{
return(StatusCode(HttpStatusCode.Forbidden));
}
await _resourcePoolManager.DeleteElementFieldAsync(elementField.Id);
return(StatusCode(HttpStatusCode.NoContent));
}