mirror of
https://github.com/Sea-Haven-Industries/shoc-backend.git
synced 2026-09-30 15:23:12 +00:00
Close the remaining SH-221 bypass: board/legacy comments and completion-doc now enforce server-derived account scope, authorize before blob storage, and cover cross-account regressions.
22 lines
724 B
C#
22 lines
724 B
C#
using System.Security.Claims;
|
|
using SeaHaven.Services.DTOs;
|
|
|
|
namespace SeaHaven.Services.Interfaces
|
|
{
|
|
public interface IWorkOrderCommentService
|
|
{
|
|
Task<IReadOnlyList<WorkOrderCommentDto>?> GetCommentsAsync(int workOrderId, ClaimsPrincipal user);
|
|
Task<WorkOrderCommentDto> AddCommentAsync(
|
|
int workOrderId,
|
|
WorkOrderCommentCreateDto request,
|
|
ClaimsPrincipal user,
|
|
string? actorId,
|
|
string? documentUrl = null);
|
|
Task<WorkOrderCommentDto> UpdateCommentAsync(
|
|
int workOrderId,
|
|
int commentId,
|
|
WorkOrderCommentCreateDto request,
|
|
ClaimsPrincipal user,
|
|
string? actorId);
|
|
}
|
|
}
|