public async Task <ActionResult> UpdateDutyComment(int dutyId, string comment) { var locationIds = await DutyRosterService.GetDutiesLocations(new List <int> { dutyId }); if (locationIds.Count != 1) { return(BadRequest(CannotUpdateCrossLocationError)); } if (!PermissionDataFiltersExtensions.HasAccessToLocation(User, Db, locationIds.First())) { return(Forbid()); } await DutyRosterService.UpdateDutyComment(dutyId, comment); return(NoContent()); }