Beispiel #1
0
        public ActionResult Index(VIEW_DCR_SHEET_Search obj)
        {
            SEC_USERS_LOGIN_Result1 user = Session["sess_sec_users"] as SEC_USERS_LOGIN_Result1;

            if ((user != null) && (user.USER_TYPE_NO == (decimal)UserType.Zonal_Manager))
            {
                obj.USER_NO = user.USER_NO;
            }

            SEC_USERS_ZM_LOGIN_GET_Result user_result = db.SEC_USERS_ZM_LOGIN_GET(null, null, obj.USER_NO, null).FirstOrDefault();


            List <TRN_DCR_SHEET_SUM_Result> dcr_sum_result = db.TRN_DCR_SHEET_SUM(obj.USER_NO, obj.TRN_DCR_DATE).ToList();

            foreach (var dcr in dcr_sum_result)
            {
                dcr.TRN_DCR_SHEET_DET_List = db.TRN_DCR_SHEET_DET(dcr.DCR_NO).ToList();
            }

            List <TRN_EXPENSE_SUM_Result> exp_result = db.TRN_EXPENSE_SUM(obj.USER_NO, obj.TRN_DCR_DATE).ToList();

            bool Is_ZonalOrAgent = (bool)Session["sess_Is_ZonalOrAgent"];

            ViewBag.Is_ZonalOrAgent = Is_ZonalOrAgent;

            ViewBag.TRN_DCR_DATE   = obj.TRN_DCR_DATE;
            ViewBag.user_result    = user_result;
            ViewBag.dcr_sum_result = dcr_sum_result;
            ViewBag.exp_result     = exp_result;

            return(View("DcrSheet"));
        }
Beispiel #2
0
 private void GetLoggedInInfo()
 {
     this.sess_sec_users       = Session["sess_sec_users"] as SEC_USERS_LOGIN_Result1;
     this.sess_LOGON_NO        = Session["sess_LOGON_NO"] as decimal?;
     this.sess_USER_NO         = Session["sess_USER_NO"] as decimal?;
     this.sess_entry_user_name = sess_sec_users.USER_NAME;
 }
Beispiel #3
0
        public ActionResult GetZonalManagerForm()
        {
            ViewBag.Zonal_Dept  = new SelectList(db.SET_DEPARTMENT, "DEPT_NO", "DEPT_NAME");
            ViewBag.Zonal_Desig = new SelectList(db.SET_DESIGNATION, "DESIG_NO", "DESIG_NAME");

            ViewBag.Division_No = new SelectList(db.SET_DIVISION, "DIVISION_NO", "DIVISION_NAME");
            ViewBag.Zilla_No    = new SelectList(db.SET_ZILLA.Where(z => z.ZILLA_NO < 0),
                                                 "ZILLA_NO", "ZILLA_NAME");
            ViewBag.Zonal_Thana = new SelectList(db.SET_THANA.Where(t => t.THANA_NO < 0),
                                                 "THANA_NO", "THANA_NAME");

            SEC_USERS_LOGIN_Result1 user = Session["sess_sec_users"] as SEC_USERS_LOGIN_Result1;

            ViewBag.Zonal_Parent_No = user.USER_NO;


            return(PartialView("_GetZonalManagerPartial"));
        }
Beispiel #4
0
        public ActionResult ChangePassword(ChangePasswordViewModel model)
        {
            decimal?USER_NO  = Session["sess_USER_NO"] as decimal?;
            decimal?LOGON_NO = Session["sess_LOGON_NO"] as decimal?;

            SEC_USERS_LOGIN_Result1 user = Session["sess_sec_users"] as SEC_USERS_LOGIN_Result1;

            if (user.USER_NO > 0 && model.OLD_PASS == user.USER_PWD && model.NEW_PASS == model.RE_NEW_PASS)
            {
                /*
                 * db.SEC_USERS_UPDATE(user.USER_MOBILE, user.USER_ADDR, user.USER_EMAIL, user.USER_NAME,
                 *  model.NEW_PASS, user.USER_PARENT_NO, user.IS_ACTIVE, user.ACTIVE_FROM, user.ACTIVE_TO,
                 *  user.USER_NO, USER_NO, LOGON_NO, user.USER_TYPE_NO, user.DEPT_NO, user.DESIG_NO,
                 *  user.HR_EMP_ID, user.USER_FULL_NAME, user.USER_NICK_NAME, user.USER_CONTACT,
                 *  user.COMP_NO, user.THANA_NO);
                 */
                db.SEC_USERS_CHANGE_PASSWORD(user.USER_NO, model.NEW_PASS, USER_NO, LOGON_NO);
            }
            return(View());
        }
Beispiel #5
0
        public ActionResult Details(int id)
        {
            this.GetLoggedInInfo();

            decimal?DCR_NO = (decimal)id;
            VIEW_TRN_DCR_APPROVE_GET_Result2 dcr = db.VIEW_TRN_DCR_APPROVE_GET(DCR_NO, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, this.sess_USER_NO, null).FirstOrDefault();

            if (dcr != null)
            {
                dcr.VIEW_TRN_DCR_DET_APRROVE_GET_Result = db.VIEW_TRN_DCR_DET_APRROVE_GET(null, DCR_NO, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null).ToList();

                ViewBag.APPROVE_TRANS_TYPE_NO = new SelectList(db.SET_TRANSPORT_TYPE, "TRANS_TYPE_NO", "TRANS_TYPE_NAME");
                ViewBag.APPROVE_TYPE_NO       = new SelectList(db.GEN_APPROVE_TYPE, "APPROVE_TYPE_NO", "APPROVE_TYPE", dcr.APPROVE_TYPE_NO);
                ViewBag.REASON_NO             = new SelectList(db.SET_REASON, "REASON_NO", "REASON_NAME", dcr.REASON_NO);
            }

            SEC_USERS_LOGIN_Result1 user = Session["sess_sec_users"] as SEC_USERS_LOGIN_Result1;

            ViewBag.USER_TYPE_NO = user.USER_TYPE_NO;

            return(View(dcr));
        }
Beispiel #6
0
        public ActionResult Login(SEC_USERS sec_user)
        {
            SEC_USERS_LOGIN_Result1 user = db.SEC_USERS_LOGIN(sec_user.USER_NAME, sec_user.USER_PWD, null).FirstOrDefault();

            if (user != null && user.USER_NO > 0)
            {
                Session["sess_sec_users"] = user;
                Session["sess_USER_NO"]   = user.USER_NO;

                if (user.USER_TYPE_NO == (decimal)EUserTypes.Agent)
                {
                    Session["sess_entry_user_no"] = user.USER_NO;
                    Session["sess_zm_user_no"]    = user.USER_PARENT_NO;
                    Session["sess_agent_user_no"] = user.USER_NO;
                }
                else
                {
                    Session["sess_entry_user_no"] = user.USER_NO;
                    Session["sess_zm_user_no"]    = user.USER_NO;
                    Session["sess_agent_user_no"] = null;
                }


                bool Is_ZonalOrAgent = ((decimal)user.USER_TYPE_NO == (decimal)EUserTypes.ZonalManager ||
                                        (decimal)user.USER_TYPE_NO == (decimal)EUserTypes.Agent);
                Session["sess_Is_ZonalOrAgent"] = Is_ZonalOrAgent;



                string sess_id      = Session.SessionID;
                string ip_addr      = CustomValidator.GetRequestIpAddress();
                string device_id    = CustomValidator.GetDeviceId();
                string login_mobile = sec_user.USER_MOBILE;
                string ws_id        = CustomValidator.GetWebServerId();
                string app_version  = sec_user.APP_VERSION;

                decimal LOGON_NO = db.SEC_USER_LOGONS_INSERT(user.USER_NO, ip_addr, device_id, null, null, null,
                                                             (decimal)ApproveType.Approved, null, null, sess_id,
                                                             login_mobile, ws_id, app_version, login_mobile).First().Value;


                Session["sess_LOGON_NO"] = LOGON_NO;

                if (user.USER_TYPE_NO == (decimal)EUserTypes.GeneralUser)
                {
                    List <SET_USER_ACTION> per_list = new List <SET_USER_ACTION>();

                    per_list = db.SET_USER_ACTION.Include(a => a.GEN_CONTROLLER_ACTION)
                               .Where(a => (a.USER_NO == user.USER_NO) && (a.IS_ACTIVE == 1))
                               .ToList();
                    List <GEN_CONTROLLER_ACTION> menu_list = (from c in per_list
                                                              where (c.GEN_CONTROLLER_ACTION.IS_MENU == 1 &&
                                                                     c.GEN_CONTROLLER_ACTION.IS_ACTIVE == 1
                                                                     )
                                                              orderby c.GEN_CONTROLLER_ACTION.SL_NUM
                                                              select c.GEN_CONTROLLER_ACTION).ToList();

                    Session["sess_MENU_LIST"] = menu_list;

                    Session["sess_PERMISSION_LIST"] = per_list;
                    if (menu_list != null)
                    {
                        GEN_CONTROLLER_ACTION redirect_action = menu_list.First();

                        return(RedirectToAction(redirect_action.ACTION_NAME, redirect_action.CONTROLLER_NAME));
                    }
                }
                else
                {
                    SET_ROLE role = db.SET_ROLE.Where(r => r.USER_TYPE_NO == user.USER_TYPE_NO).FirstOrDefault();

                    decimal?ROLE_NO = null;

                    if (role != null)
                    {
                        ROLE_NO            = role.ROLE_NO;
                        Session["ROLE_NO"] = role.ROLE_NO;
                    }

                    //ROLE_NO = decimal.Parse(Session["ROLE_NO"].ToString());

                    List <SET_ROLE_ACTION> per_list = new List <SET_ROLE_ACTION>();

                    if (ROLE_NO.HasValue)
                    {
                        per_list = db.SET_ROLE_ACTION.Include(a => a.GEN_CONTROLLER_ACTION)
                                   .Where(a => (a.ROLE_NO == ROLE_NO.Value) && (a.IS_ACTIVE == 1))
                                   .ToList();
                        List <GEN_CONTROLLER_ACTION> menu_list = (from c in per_list
                                                                  where (c.GEN_CONTROLLER_ACTION.IS_MENU == 1 &&
                                                                         c.GEN_CONTROLLER_ACTION.IS_ACTIVE == 1
                                                                         )
                                                                  orderby c.GEN_CONTROLLER_ACTION.SL_NUM
                                                                  select c.GEN_CONTROLLER_ACTION).ToList();

                        Session["sess_MENU_LIST"] = menu_list;

                        Session["sess_PERMISSION_LIST"] = per_list;
                        if (menu_list != null)
                        {
                            GEN_CONTROLLER_ACTION redirect_action = menu_list.First();

                            return(RedirectToAction(redirect_action.ACTION_NAME, redirect_action.CONTROLLER_NAME));
                        }
                    }
                }
            }
            return(View());
        }
        public ActionResult GetSubjects(decimal?p_ins, string type)
        {
            ViewBag.Download_Allowed = false;
            ViewBag.Reset_Allowed    = false;

            SEC_USERS_LOGIN_Result1 user = Session["sess_sec_users"] as SEC_USERS_LOGIN_Result1;

            if (user.USER_TYPE_NO == (decimal)EUserTypes.GeneralUser)
            {
                List <SET_USER_ACTION> perm_list = Session["sess_PERMISSION_LIST"] as List <SET_USER_ACTION>;
                foreach (var perm in perm_list)
                {
                    GEN_CONTROLLER_ACTION controller_action = perm.GEN_CONTROLLER_ACTION;
                    if (controller_action.CONTROLLER_NAME == "QuestionMonitor" && controller_action.ACTION_NAME == "Download")
                    {
                        ViewBag.Download_Allowed = true;
                    }
                    if (controller_action.CONTROLLER_NAME == "QuestionMonitor" && controller_action.ACTION_NAME == "Reset")
                    {
                        ViewBag.Reset_Allowed = true;
                    }
                }
            }
            else
            {
                List <SET_ROLE_ACTION> perm_list = Session["sess_PERMISSION_LIST"] as List <SET_ROLE_ACTION>;
                foreach (var perm in perm_list)
                {
                    GEN_CONTROLLER_ACTION controller_action = perm.GEN_CONTROLLER_ACTION;
                    if (controller_action.CONTROLLER_NAME == "QuestionMonitor" && controller_action.ACTION_NAME == "Download")
                    {
                        ViewBag.Download_Allowed = true;
                    }
                    if (controller_action.CONTROLLER_NAME == "QuestionMonitor" && controller_action.ACTION_NAME == "Reset")
                    {
                        ViewBag.Reset_Allowed = true;
                    }
                }
            }

            TPR_PROJECT_INSTITUTE pins = db.TPR_PROJECT_INSTITUTE
                                         .Single(t => t.PROJECT_INS_NO == p_ins);

            TPR_PROJECT project = db.TPR_PROJECT.Include("SET_CLASS")
                                  .Single(p => p.PROJECT_NO == pins.PROJECT_NO);

            USER_INFO_VIEWMODEL zonal_info =
                (from u in db.SEC_USERS
                 join d in db.SET_DESIGNATION on u.DESIG_NO equals d.DESIG_NO
                 join t in db.SET_THANA on u.THANA_NO equals t.THANA_NO
                 join z in db.SET_ZILLA on t.ZILLA_NO equals z.ZILLA_NO
                 join div in db.SET_DIVISION on z.DIVISION_NO equals div.DIVISION_NO
                 where u.USER_NO == pins.USER_NO
                 select new USER_INFO_VIEWMODEL
            {
                userno = u.USER_NO,
                fullname = u.USER_FULL_NAME,
                username = u.USER_NAME,
                hrid = u.HR_EMP_ID,
                mobile = u.USER_MOBILE,
                designation = d.DESIG_NAME,
                thana = t.THANA_NAME,
                zilla = z.ZILLA_NAME,
                division = div.DIVISION_NAME
            }).FirstOrDefault();

            INSTITUTE_INFO_VIEWMODEL institute_info =
                (from i in db.SET_INSTITUTE
                 join t in db.SET_THANA on i.THANA_NO equals t.THANA_NO
                 join z in db.SET_ZILLA on t.ZILLA_NO equals z.ZILLA_NO
                 join d in db.SET_DIVISION on z.DIVISION_NO equals d.DIVISION_NO
                 where i.INSTITUTE_NO == pins.INSTITUTE_NO
                 select new INSTITUTE_INFO_VIEWMODEL
            {
                insname = i.INSTITUTE_NAME,
                inscode = i.INSTITUTE_NO,
                thana = t.THANA_NAME,
                zilla = z.ZILLA_NAME,
                division = d.DIVISION_NAME
            }).FirstOrDefault();

            ViewBag.PROJECT           = project;
            ViewBag.ZONAL_INFO        = zonal_info;
            ViewBag.INSTITUTE_INFO    = institute_info;
            ViewBag.PROJECT_INSTITUTE = pins;

            decimal?USER_NO  = Session["sess_USER_NO"] as decimal?;
            decimal?LOGON_NO = Session["sess_LOGON_NO"] as decimal?;

            var subjects = db.TPR_SUBJECTS_GET(p_ins, type, 0, null, USER_NO, LOGON_NO).ToList();

            return(PartialView("_GetSubjects", subjects));
        }
Beispiel #8
0
        public JsonResult getDCRDetailsEditable(decimal dcrNo)
        {
            TRN_DCR dcr = db.TRN_DCR.Where(x => x.DCR_NO == dcrNo).First();
            string  tmp = "";

            if (dcr.IS_REF_ZM.HasValue)
            {
                if (dcr.IS_REF_ZM == 1)
                {
                    tmp += "<b>Ref</b></td><td>" + dcr.REF_ZM_MOBILE;
                }
            }
            string ret = @"<table class='table table-responsive' style='width:95%;margin-left:auto;'><tbody>
                        <tr><td><b>Work Type</b></td><td>" + dcr.GEN_DCR_TYPE.DCR_TYPE + "</td><td></td></tr>" +
                         "<tr><td><b>ZM</b></td><td>" + dcr.SEC_USERS.USER_FULL_NAME + "(" + dcr.SEC_USERS.USER_MOBILE + ")" + "</td><td>" + tmp + "</td><td></td></tr>" +
                         "<tr><td><b>Date</b></td><td>" + dcr.TRN_DCR_DATE.ToString("yyyy-MM-dd") + "</td><td></td></tr>" +
                         "<tr><td><b>Start Location</b></td><td>" + dcr.WORK_AREA_FROM_NAME + "</td><td><b>End Location</b></td><td>" + dcr.WORK_AREA_TO_NAME + "</td></tr>" +
                         "<tr><td><b>Start Time</b></td><td>" + DateTime.Parse(dcr.TIME_FROM.ToString()).ToShortTimeString() + "</td><td><b>End Location</b></td><td>" + DateTime.Parse(dcr.TIME_TO.ToString()).ToShortTimeString() + "</td></tr>" +
                         "<tr><td><b>Transport</b></b></td><td>" + dcr.SET_TRANSPORT_TYPE.TRANS_TYPE_NAME + "</td><td><b>Cost/Fare</b></td><td>" + dcr.FARE_AMT.ToString() + "</td></tr>" +
                         "<tr><td><b>Institute</b></td><td>" + ((dcr.SET_INSTITUTE != null) ? dcr.SET_INSTITUTE.INSTITUTE_NAME : "") +
                         "</td><td></td></tr></tbody></table><br/>";

            ret += "<table class=\"table table-responsive\" style=\"width:95%;margin-left:auto;\">";
            IList <TRN_DCR_DET> dcr_dets = db.TRN_DCR_DET.Where(x => x.DCR_NO == dcrNo).ToList();

            if (dcr_dets.Count != 0)
            {
                switch (dcr.GEN_DCR_TYPE.DCR_TYPE_CODE)
                {
                case "TC":

                    ret += "<tr><th>Contact No</th><th>Type</th></tr>";

                    foreach (TRN_DCR_DET dts in dcr_dets)
                    {
                        ret += "<tr><td>" + dts.TEACHER_MOBILE + "</td><td>" + "Teacher" + "</td></tr>";
                    }

                    break;

                case "LC":
                    ret += "<tr><th>Contact No</th><th>Type</th></tr>";
                    foreach (TRN_DCR_DET dts in dcr_dets)
                    {
                        bool is_teacher = true;
                        if (dts.IS_FOR_CLIENT != null)
                        {
                            if (dts.IS_FOR_CLIENT == 1)
                            {
                                is_teacher = false;
                            }
                        }
                        ret += "<tr><td>" + ((!is_teacher) ? dts.CLIENT_MOBILE : dts.TEACHER_MOBILE) + "</td><td>" + ((!is_teacher) ? "Client" : "Teacher") + "</td></tr>";
                    }
                    break;

                case "CSR":
                case "SD":
                    SEC_USERS_LOGIN_Result1 usertp = (SEC_USERS_LOGIN_Result1)Session["sess_sec_users"];
                    decimal        tmpdet          = decimal.Parse(usertp.USER_TYPE_NO.ToString());
                    GEN_USER_TYPES gentype         = db.GEN_USER_TYPES.Single(x => x.USER_TYPE_NO == tmpdet);
                    ret     += "<tr><th>Item</th><th>Qty</th><th>Contact</th><th>On Behalf?</th><th>On Behalf Mobile No</th><th></th></tr>";
                    dcr_dets = dcr_dets.OrderByDescending(x => x.SET_SPECIMEN.SPECIMEN_NAME).Reverse().ToList();


                    foreach (TRN_DCR_DET dts in dcr_dets)
                    {
                        bool is_behalf = true;
                        if (dts.IS_ON_BEHALF != null)
                        {
                            if (dts.IS_ON_BEHALF != 1)
                            {
                                is_behalf = false;
                            }
                        }

                        ret += "<tr><td>" + dts.SET_SPECIMEN.SPECIMEN_NAME + "</td><td>" +
                               ((gentype.IS_ADMIN == 1) ? "<input id='txtsdup" + dts.DCR_DET_NO + "' type='text' class='form-control input-small' value='" + dts.APPROVE_SPECIMEN_QTY + "'></input>" : dts.APPROVE_SPECIMEN_QTY.ToString()) +
                               "</td><td>" + dts.TEACHER_MOBILE + "</td><td>" + ((is_behalf) ? "Yes" : "No") + "</td><td>" +
                               ((is_behalf) ? dts.BEHALF_MOBILE : "-") + "</td><td>" +
                               ((gentype.IS_ADMIN == 1) ? "<button class='btn btn-warning btn-small btnupdate' attr='" + dts.DCR_DET_NO + "' onclick='changeSDonApprove($(this));'>Edit</button>" : "") + "</td></tr>";
                    }
                    break;

                case "MP":
                    ret     += "<tr><th>Item</th><th>Whom</th><th>Qty</th><th>Contact</th><th>On Behalf?</th><th>On Behalf Mobile No</th></tr>";
                    dcr_dets = dcr_dets.OrderByDescending(x => x.SET_PROMO_ITEM.PROMO_ITEM_NAME).Reverse().ToList();
                    foreach (TRN_DCR_DET dts in dcr_dets)
                    {
                        bool is_behalf = true;
                        if (dts.IS_ON_BEHALF != null)
                        {
                            if (dts.IS_ON_BEHALF != 1)
                            {
                                is_behalf = false;
                            }
                        }
                        ret += "<tr><td>" + dts.SET_PROMO_ITEM.PROMO_ITEM_NAME + "</td><td>" + ((dts.IS_FOR_TEACHER == 1) ? "Teacher" : "Client") + "</td><td>" +
                               dts.PROMO_ITEM_QTY + "</td><td>" + ((dts.IS_FOR_TEACHER == 1) ? dts.TEACHER_MOBILE : dts.CLIENT_MOBILE) +
                               "</td><td>" + ((is_behalf) ? "Yes" : "No") + "</td><td>" +
                               ((is_behalf) ? dts.BEHALF_MOBILE : "") + "</td></tr>";
                    }
                    break;

                default:
                    ret += "";
                    break;
                }
            }
            ret += "</table>";

            return(Json(new { html = ret }, JsonRequestBehavior.AllowGet));
        }
Beispiel #9
0
        protected override bool AuthorizeCore(HttpContextBase httpContext)
        {
            using (OGDBEntities db = new OGDBEntities())
            {
                HttpBrowserCapabilitiesBase browser = httpContext.Request.Browser;

                string controllerName = httpContext.Request.RequestContext.RouteData.GetRequiredString("controller").Trim();
                string actionName     = httpContext.Request.RequestContext.RouteData.GetRequiredString("action").Trim();


                List <GEN_CONTROLLER_ACTION> public_list = httpContext.Session["sess_PUBLIC_LIST"] as List <GEN_CONTROLLER_ACTION>;
                if (public_list == null)
                {
                    public_list = db.GEN_CONTROLLER_ACTION.Where(a => (a.IS_ACTIVE == 1) && (a.IS_PUBLIC == 1)).ToList();
                    httpContext.Session["sess_PUBLIC_LIST"] = public_list;
                }


                GEN_CONTROLLER_ACTION public_allow = public_list.Where(a =>
                                                                       (a.CONTROLLER_NAME.Trim().ToUpper() == controllerName.Trim().ToUpper()) &&
                                                                       (a.ACTION_NAME.Trim().ToUpper() == actionName.Trim().ToUpper())
                                                                       ).FirstOrDefault();
                if (public_allow != null)
                {
                    return(true);
                }

                SEC_USERS_LOGIN_Result1 user = httpContext.Session["sess_sec_users"] as SEC_USERS_LOGIN_Result1;

                if (user != null && user.USER_TYPE_NO == (decimal)EUserTypes.GeneralUser)
                {
                    List <SET_USER_ACTION> perm_list = httpContext.Session["sess_PERMISSION_LIST"] as List <SET_USER_ACTION>;

                    if (perm_list == null)
                    {
                        perm_list = db.SET_USER_ACTION.Include(a => a.GEN_CONTROLLER_ACTION)
                                    .Where(a => a.USER_NO == user.USER_NO).ToList();
                        httpContext.Session["sess_PERMISSION_LIST"] = perm_list;
                    }

                    if ((perm_list == null) || (perm_list.Count == 0))
                    {
                        return(false);
                    }
                    else
                    {
                        SET_USER_ACTION action_allow = perm_list.Where(a =>
                                                                       (a.GEN_CONTROLLER_ACTION.CONTROLLER_NAME.Trim().ToUpper() == controllerName.Trim().ToUpper()) &&
                                                                       (a.GEN_CONTROLLER_ACTION.ACTION_NAME.Trim().ToUpper() == actionName.Trim().ToUpper())
                                                                       /*&& (a.IS_ALLOWED == 1)*/).FirstOrDefault();
                        if (action_allow != null)
                        {
                            return(true);
                        }
                    }
                }

                else
                {
                    List <SET_ROLE_ACTION> perm_list = httpContext.Session["sess_PERMISSION_LIST"] as List <SET_ROLE_ACTION>;

                    long?role_no = null;

                    if (httpContext.Session["ROLE_NO"] != null)
                    {
                        role_no = long.Parse(httpContext.Session["ROLE_NO"].ToString());
                    }

                    if (role_no == null)
                    {
                        //userType = (long)UserTypes.Public;
                        return(false);
                    }

                    if (perm_list == null)
                    {
                        perm_list = db.SET_ROLE_ACTION.Include(a => a.GEN_CONTROLLER_ACTION)
                                    .Where(a => a.ROLE_NO == role_no).ToList();
                        httpContext.Session["sess_PERMISSION_LIST"] = perm_list;
                    }

                    if ((perm_list == null) || (perm_list.Count == 0))
                    {
                        return(false);
                    }
                    else
                    {
                        SET_ROLE_ACTION action_allow = perm_list.Where(a =>
                                                                       (a.GEN_CONTROLLER_ACTION.CONTROLLER_NAME.Trim().ToUpper() == controllerName.Trim().ToUpper()) &&
                                                                       (a.GEN_CONTROLLER_ACTION.ACTION_NAME.Trim().ToUpper() == actionName.Trim().ToUpper())
                                                                       /*&& (a.IS_ALLOWED == 1)*/).FirstOrDefault();
                        if (action_allow != null)
                        {
                            return(true);
                        }
                    }
                }

                return(base.AuthorizeCore(httpContext));
            }
        }