public async Task <MProductMedia> AddProductMediaAsync(MProductMedia media) { const string sql = "INSERT INTO dbo.ProductMedias (ProductId, YoutubeUrl, ImageId) " + "OUTPUT INSERTED.Id, INSERTED.ProductId, INSERTED.YoutubeUrl, INSERTED.ImageId " + "VALUES (@ProductId, @YoutubeUrl, @ImageId);"; return(await connection.QuerySingleAsync <MProductMedia>(sql, media)); }
public async Task <IActionResult> PostProductMediaAsync([FromBody] MProductMedia media) { if (!User.IsInRole(RoleConstants.AdminRoleId) && !await productsRepository.IsProductSellerAsync(media.ProductId, int.Parse(User.Identity.Name))) { return(BadRequest()); } return(Ok(await productsRepository.AddProductMediaAsync(media))); }