public bool addQuanLyCheDoSuDung(QuanLyCheDoSuDungObject newSec)
{
bool result = false;
SqlConnection conn = new SqlConnection(connectionString);
try
{
string query = "INSERT INTO Su_QuanLyCheDoSuDung VALUES(N'"
+ newSec.Name
+ "', N'" + newSec.Description
+ "');";
conn.Open();
executeDataByQuery(query, conn, null);
result = true;
}
catch (Exception e)
{
logUserManagement("addApprover()", e.Message);
}
finally
{
conn.Close();
}
return(result);
}
public QuanLyCheDoSuDungObject getQuanLyCheDoSuDung(int ID)
{
QuanLyCheDoSuDungObject result = null;
string query = "SELECT ID, Name, Description FROM Su_QuanLyCheDoSuDung WHERE ID = " + ID + "";
DataTable dt = getData(query);
if (dt.Rows.Count > 0)
{
result = new QuanLyCheDoSuDungObject();
result.ID = ID;
result.Name = dt.Rows[0][1].ToString();
result.Description = dt.Rows[0][2].ToString();
}
return(result);
}
public bool updateQuanLyCheDoSuDung(QuanLyCheDoSuDungObject Sec)
{
bool result = false;
SqlConnection conn = new SqlConnection(connectionString);
string query = "UPDATE Su_QuanLyCheDoSuDung SET Name = N'" + Sec.Name
+ "', Description = N'" + Sec.Description
+ "' WHERE ID = " + Sec.ID + "";
try
{
conn.Open();
executeDataByQuery(query, conn, null);
result = true;
}
catch (Exception e)
{
logUserManagement("updateQuanLyCheDoSuDung()", e.Message);
}
finally
{
conn.Close();
}
return(result);
}
