public async Task <ActionResult> Edit(int id)
{
var unit = await GetUnitToHandle(id);
if (unit != null)
{
if ((await _authorizationService.AuthorizeAsync(User, unit, Policies.Edit)).Succeeded)
{
return(View(CustomerUnitModel.GetModelFromCustomerUnit(unit, User.IsInRole(Roles.CentralAdministrator))));
}
}
return(Forbid());
}
public async Task <ActionResult> View(int id)
{
var unit = await GetUnitToHandle(id);
if (unit != null)
{
if ((await _authorizationService.AuthorizeAsync(User, unit, Policies.View)).Succeeded)
{
return(View(CustomerUnitModel.GetModelFromCustomerUnit(unit)));
}
}
return(Forbid());
}