public ActionResult AddReview(HousingPost post)
{
LocalHousingModule housingModule = new LocalHousingModule();
string username = "";
if (User != null && User.Identity != null)
username = User.Identity.Name;
housingModule.AddHousingPost(post, User.Identity.Name);
return RedirectToAction("Index");
}
public ActionResult RemoveReview(int postID)
{
LocalHousingModule housingModule = new LocalHousingModule();
HousingPost post = housingModule.GetHousingPost(postID);
if (User.IsInRole("admin") || User.Identity.Name.Equals(post.PostedBy))
{
housingModule.DeleteHousingPost(postID);
}
else
{
throw new HttpException(403, "Access Denied");
}
return null;
}