public async Task <ActionResult <User> > GetUser(string builderId) { var currentUserId = User.Identity.Name; User user; try { if (User.IsInRole(Role.Admin)) { user = await _buildersService.GetUserFromAdminAsync(builderId); } else if (User.IsInRole(Role.Coach)) { user = await _buildersService.GetUserFromCoachAsync(currentUserId, builderId); } else if (User.IsInRole(Role.Builder)) { user = await _buildersService.GetUserFromBuilderAsync(currentUserId, builderId); } else { return(Forbid("You must be part of the Buildup program")); } } catch (UnauthorizedAccessException e) { return(Forbid($"You are not allowed to get this user: {e.Message}")); } catch (Exception e) { return(BadRequest($"Can't get the user: {e.Message}")); } if (user == null) { return(NotFound()); } return(Ok(user)); }