public override void OnActionExecuting(ActionExecutingContext context)
{
AssignmentsController controller = (AssignmentsController)context.Controller;
ILogger logger = controller.GetLogger();
try
{
var id = Guid.Parse(CryptographicHelper.SymmetricDecrypt(context.ActionArguments["id"].ToString()));
var loggedInUser = context.HttpContext.User.Identity.Name;
IAssignmentsService assignmentsService = (IAssignmentsService)context.HttpContext.RequestServices.GetService(typeof(IAssignmentsService));
if (loggedInUser != assignmentsService.GetSubmission(id).Member.Email&& !context.HttpContext.User.IsInRole("Teacher"))
{
IPHostEntry iphostinfo = Dns.GetHostEntry(Dns.GetHostName());
string ipaddress = Convert.ToString(iphostinfo.AddressList.FirstOrDefault(address => address.AddressFamily == System.Net.Sockets.AddressFamily.InterNetwork));
logger.LogInformation(loggedInUser + " on IP " + ipaddress + " tried to access submission with id " + id + ". Access was denied");
context.Result = new UnauthorizedObjectResult("Access Denied");
}
}
catch (Exception ex)
{
logger.LogInformation("Bad request when user tried to access a file");
context.Result = new BadRequestObjectResult("Bad Request");
}
base.OnActionExecuting(context);
}