Beispiel #1
0
        public ActionResult List(string user)
        {
            if (!(Roles.IsUserInRole("Administrator") || Roles.IsUserInRole("Job Coach") || Roles.IsUserInRole("Parent")))
            {
                Response.Redirect("~/Unauthorized");
                return(View());
            }

            if (!(Roles.IsUserInRole("Administrator") || accountHelper.isThisUserUsersParent(user) || accountHelper.isThisUserUsersJobCoach(user)))
            {
                Response.Redirect("~/Unauthorized");
                return(View());
            }

            if (!accountHelper.userExists(user) || !Roles.IsUserInRole(user, "User"))
            {
                return(HttpNotFound());
            }

            ViewData["UserNotes"] = helper.getUserNotes(user);
            ViewData["JobNotes"]  = helper.getJobNotes(user);
            ViewData["StepNotes"] = helper.getStepNotes(user);
            ViewData["user"]      = user;

            return(View());
        }