public ActionResult GroupDealPictureList(DataSourceRequest command, int groupDealId) { //if (!_permissionService.Authorize(StandardPermissionProvider.ManageProducts)) // return AccessDeniedView(); //a vendor should have access only to his products if (_workContext.CurrentVendor != null) { var groupdeal = _groupDealRepo.GetById(groupDealId); if (groupdeal != null && groupdeal.VendorId != _workContext.CurrentVendor.Id) { return Content("This is not your product"); } } var productPictures = _productService.GetProductPicturesByProductId(groupDealId); var groupdealPicturesModel = productPictures .Select(x => { var picture = _pictureService.GetPictureById(x.PictureId); if (picture == null) throw new Exception("Picture cannot be loaded"); var m = new GroupdealPictureViewModel { Id = x.Id, GroupdealId = x.ProductId, PictureId = x.PictureId, PictureUrl = _pictureService.GetPictureUrl(picture), OverrideAltAttribute = picture.AltAttribute, OverrideTitleAttribute = picture.TitleAttribute, DisplayOrder = x.DisplayOrder }; return m; }) .ToList(); var gridModel = new DataSourceResult { Data = groupdealPicturesModel, Total = groupdealPicturesModel.Count }; return Json(gridModel); }
public ActionResult GroupdealPictureUpdate(GroupdealPictureViewModel model) { //if (!_permissionService.Authorize(StandardPermissionProvider.ManageProducts)) // return AccessDeniedView(); var groupdealPicture = _groupdealService.GetGroupdealPictureById(model.Id); if (groupdealPicture == null) throw new ArgumentException("No product picture found with the specified id"); //a vendor should have access only to his products if (_workContext.CurrentVendor != null) { var product = _productService.GetProductById(groupdealPicture.GroupdealId); if (product != null && product.VendorId != _workContext.CurrentVendor.Id) { return Content("This is not your product"); } } groupdealPicture.DisplayOrder = model.DisplayOrder; _groupdealService.UpdateGroupdealPicture(groupdealPicture); var picture = _pictureService.GetPictureById(groupdealPicture.PictureId); if (picture == null) throw new ArgumentException("No picture found with the specified id"); _pictureService.UpdatePicture(picture.Id, _pictureService.LoadPictureBinary(picture), picture.MimeType, picture.SeoFilename, model.OverrideAltAttribute, model.OverrideTitleAttribute); return new NullJsonResult(); }