public IHttpActionResult GetAllUsers([FromUri] ResultFormatViewModel formatModel) { if (formatModel == null) { return(this.BadRequest()); } var usersModel = this.userService .GetAllUsers(formatModel.Skip, formatModel.Take, formatModel.Order, formatModel.Search) .Select(user => new DisplayUserViewModel(user.Email, user.FirstName, user.LastName, user.DisplayName, user.UserName)); return(this.Ok(usersModel)); }
public IHttpActionResult GetUserInvitations(string username, [FromUri] ResultFormatViewModel model) { if (string.IsNullOrEmpty(username) || model == null) { return(this.BadRequest()); } var currentUser = this.sessionService.GetCurrentUser(); if (currentUser.UserName != username) { return(this.Content(HttpStatusCode.Forbidden, "Users are only allowed to access their invitations.")); } var invitations = this.userService.GetUserInvitations(currentUser, model.Skip, model.Take, model.Order); var invitationsModel = invitations .Select(i => new InvitationViewModel(i.Id, i.SentDate, i.Group.Name, i.Receiver.UserName)); return(this.Ok(invitationsModel)); }