public List <CommentUpdate> GetUpdates(DateTime from, DateTime to) { var comments = dao.GetUpdates(from, to); return(comments.Where(x => ProjectSecurity.CanRead(new Project() { ID = x.ProjectId })).ToList()); }