[Authorize(gAppConst.AccessPolicies.LevelThree)] /// Done
public async Task <IActionResult> Delete([FromBody] gComment comment)
{
try
{
/// if the Comment record with the same id is not found
if (!await DbContext.Comments.AnyAsync(d => d.Id == comment.Id).ConfigureAwait(false))
{
gAppConst.Error(ref ErrorsList, "Comment not found");
return(BadRequest(ErrorsList));
}
/// else the Comment is found
/// now delete the Comment record
DbContext.Comments.Remove(comment);
/// save the changes to the database
await DbContext.SaveChangesAsync().ConfigureAwait(false);
/// return 200 Ok status
return(Ok($"Comment was deleted"));
}
catch (Exception)
{
/// Add the error below to the error list and return bad Comment
gAppConst.Error(ref ErrorsList, $"Server Error. Please Contact Administrator.");
return(BadRequest(ErrorsList));
}
}
[Authorize(gAppConst.AccessPolicies.LevelFour)] /// Done
public async Task <IActionResult> Post([FromBody] gComment newComment)
{
try
{
/// check the database to see if a Comment with the same name exists
if (await DbContext.Comments.AnyAsync(d => d.Description == newComment.Description &&
d.User.Id == newComment.User.Id &&
d.IdeaId == newComment.IdeaId).ConfigureAwait(false))
{
/// extract the errors and return bad request containing the errors
gAppConst.Error(ref ErrorsList, "Comment already exists.");
return(BadRequest(ErrorsList));
}
newComment.User = await DbContext.Users.Include(u => u.Department).Include(u => u.Role).FirstAsync(u => u.Id == newComment.User.Id).ConfigureAwait(false);
ModelState.Remove("User.PasswordHash");
/// if model validation failed
if (!TryValidateModel(newComment))
{
gAppConst.ExtractErrors(ModelState, ref ErrorsList);
/// return bad request with all the errors
return(BadRequest(ErrorsList));
}
/// else Comment object is made without any errors
/// Add the new Comment to the EF context
await DbContext.Comments.AddAsync(newComment).ConfigureAwait(false);
/// save the changes to the data base
await DbContext.SaveChangesAsync().ConfigureAwait(false);
/// return 201 created status with the new object
/// and success message
return(Created("Success", newComment));
}
catch (Exception) // DbUpdateException, DbUpdateConcurrencyException
{
/// Add the error below to the error list and return bad request
gAppConst.Error(ref ErrorsList, "Server Error. Please Contact Administrator.");
return(BadRequest(ErrorsList));
}
}
