MvcWrench.Models.UserRepository.GetRolesForUser C# (CSharp) Method

        public static List<Role> GetRolesForUser(int userId)
        {
            NpgsqlConnection conn = new NpgsqlConnection (conn_string);
            NpgsqlCommand comm = conn.CreateCommand ();

            string sql = "SELECT * FROM roles, userroles WHERE userroles.roleid = roles.id and userroles.userid = @userid";
            comm.CommandText = sql;

            comm.Parameters.Add ("@userid", userId);

            conn.Open ();

            NpgsqlDataReader reader = comm.ExecuteReader ();

            List<Role> roles = new List<Role> ();

            while (reader.Read ())
                roles.Add (new Role (reader));

            reader.Close ();
            comm.Dispose ();
            conn.Close ();

            return roles;
        }