$userid = $_SESSION['userid'];
                $issueNote->markAsRead($userid);
                $data = 'OK';
            } else {
                $data = 'ERROR';
                // TODO return ERROR
                Tools::sendBadRequest("Could not mark as read.");
            }
            // return data
            echo $data;
        } else {
            if ($_POST['action'] == 'deleteNote') {
                $userid = $_SESSION['userid'];
                $bugid = Tools::getSecurePOSTIntValue('bugid');
                $bugnoteid = Tools::getSecurePOSTIntValue('bugnote_id');
                $retCode = IssueNote::delete($bugnoteid, $bugid, $userid);
                if ($retCode) {
                    $data = 'OK';
                } else {
                    $data = 'ERROR';
                    // TODO return ERROR
                    Tools::sendBadRequest("Could not delete note.");
                }
                // return data
                echo $data;
            }
        }
    }
} else {
    Tools::sendUnauthorizedAccess();
}