mirror of
https://github.com/Sea-Haven-Industries/shoc-backend.git
synced 2026-10-07 16:19:07 +00:00
Board completion/media uploads now check domain state first, use server-controlled filenames with an allowlist, store under App_Data, and serve via authenticated download endpoints. Also harden WeekRolled log arguments against CodeQL log-injection findings.
14 lines
627 B
C#
14 lines
627 B
C#
using Data.SeaHavenIndustries.Enums;
|
|
using SeaHaven.Services.DTOs;
|
|
|
|
namespace SeaHaven.Services.Interfaces
|
|
{
|
|
public interface IWorkOrderMediaService
|
|
{
|
|
Task<IReadOnlyList<WorkOrderMediaFileDto>?> GetMediaAsync(int workOrderId);
|
|
Task EnsureCanAddMediaAsync(int workOrderId, WorkOrderMediaCategory category);
|
|
Task<WorkOrderMediaFileDto> AddMediaAsync(int workOrderId, WorkOrderMediaCategory category, string fileUrl, string? actorId);
|
|
Task DeleteMediaAsync(int workOrderId, int mediaId, string? actorId);
|
|
Task<string?> GetMediaStoredPathAsync(int workOrderId, int mediaId);
|
|
}
|
|
}
|