From 12b6bd859e215d9766695f4e18500bb42a6bd89a Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 31 Jul 2026 21:52:41 -0300
Subject: [PATCH] fix(security): remove request-controlled write guards

---
 .../Controllers/VendorCompanyRosterController.cs            | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/Api.SeaHavenIndustries/Controllers/VendorCompanyRosterController.cs b/Api.SeaHavenIndustries/Controllers/VendorCompanyRosterController.cs
index 398d2ab..ec5fbca 100644
--- a/Api.SeaHavenIndustries/Controllers/VendorCompanyRosterController.cs
+++ b/Api.SeaHavenIndustries/Controllers/VendorCompanyRosterController.cs
@@ -64,9 +64,6 @@ namespace Api.SeaHavenIndustries.Controllers
         [HttpPost]
         public async Task<IActionResult> Create([FromBody] CreateVendorRosterDTO model, CancellationToken cancellationToken)
         {
-            if (model == null)
-                return BadRequest(new Response { Status = "Error", Message = "Request body is required" });
-
             var userId = User.FindFirstValue(ClaimTypes.NameIdentifier);
             if (userId == null)
                 return Unauthorized(new Response { Status = "Error", Message = "User not authenticated" });
@@ -97,9 +94,6 @@ namespace Api.SeaHavenIndustries.Controllers
             [FromBody] ReconcileVendorRosterDTO model,
             CancellationToken cancellationToken)
         {
-            if (model == null)
-                return BadRequest(new Response { Status = "Error", Message = "Request body is required" });
-
             var userId = User.FindFirstValue(ClaimTypes.NameIdentifier);
             if (userId == null)
                 return Unauthorized(new Response { Status = "Error", Message = "User not authenticated" });