|
public GetMinions ( string userId, bool isTeacher ) : List |
||
| userId | string | |
| isTeacher | bool | |
| return | List |
|
public JsonResult Users()
{
User currentUser = GlobalVariables.CurrentUser;
DatabaseRepository db = new DatabaseRepository();
List<User> users = db.GetMinions(currentUser.user_id, currentUser.user_is_teacher);
return Json(users, JsonRequestBehavior.AllowGet);
}
public override void OnActionExecuting(ActionExecutingContext filterContext)
{
DatabaseRepository db = new DatabaseRepository();
string userId = filterContext.ActionParameters["userId"].ToString();
User currentUser = GlobalVariables.CurrentUser;
List<User> users = db.GetMinions(currentUser.user_id, currentUser.user_is_teacher);
// If the user is not the commenter, redirect
if (!users.Any( u => u.user_id == userId))
filterContext.Result = new RedirectToRouteResult(new RouteValueDictionary(
new { action = "Index", controller = "Error" }));
}
