public async Task <IActionResult> GetByStudent(Guid studentId) { return(await ProcessAsync(async() => { if (await AuthoriseStudent(studentId)) { var academicYearId = await GetCurrentAcademicYearId(); var incidents = await _incidentService.GetByStudent(studentId, academicYearId); return Ok(incidents.Select(x => x.ToListModel())); } return Forbid(); }, Permissions.Behaviour.Incidents.ViewIncidents)); }