From a4216eb7d1d80bb71b2b677072f6b1af0e762265 Mon Sep 17 00:00:00 2001
From: John Cardinal <support@ayanova.com>
Date: Wed, 16 Jun 2021 23:57:07 +0000
Subject: [PATCH]

---
 server/AyaNova/Controllers/WorkOrderController.cs | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/server/AyaNova/Controllers/WorkOrderController.cs b/server/AyaNova/Controllers/WorkOrderController.cs
index 66b9d040..2421d605 100644
--- a/server/AyaNova/Controllers/WorkOrderController.cs
+++ b/server/AyaNova/Controllers/WorkOrderController.cs
@@ -67,11 +67,12 @@ namespace AyaNova.Api.Controllers
             WorkOrderBiz biz = WorkOrderBiz.GetBiz(ct, HttpContext);
             if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
                 return StatusCode(403, new ApiNotAuthorizedResponse());
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
             if (newObject.Items.Count > 0)
                 return BadRequest(new ApiErrorResponse(ApiErrorCode.INVALID_OPERATION, "generalerror", "Work order POST route accepts header only; POST Work order descendants separately"));
 
-            if (!ModelState.IsValid)
-                return BadRequest(new ApiErrorResponse(ModelState));
             WorkOrder o = await biz.WorkOrderCreateAsync(newObject);
             if (o == null)
                 return BadRequest(new ApiErrorResponse(biz.Errors));