[Plugin] Remove redundant code, balance and roles
This commit is contained in:
parent
39f34ff434
commit
7b2334bd98
|
@ -84,7 +84,7 @@ def set_limit(userid, current_session: Session):
|
||||||
|
|
||||||
|
|
||||||
@balance_bp.route("/users/<userid>/balance", methods=["GET"])
|
@balance_bp.route("/users/<userid>/balance", methods=["GET"])
|
||||||
@login_required()
|
@login_required(permission=permissions.SHOW)
|
||||||
def get_balance(userid, current_session: Session):
|
def get_balance(userid, current_session: Session):
|
||||||
"""Get balance of user, optionally filtered
|
"""Get balance of user, optionally filtered
|
||||||
|
|
||||||
|
@ -99,9 +99,7 @@ def get_balance(userid, current_session: Session):
|
||||||
Returns:
|
Returns:
|
||||||
JSON object containing credit, debit and balance or HTTP error
|
JSON object containing credit, debit and balance or HTTP error
|
||||||
"""
|
"""
|
||||||
if (userid == current_session._user.userid and not current_session._user.has_permission(permissions.SHOW)) or (
|
if userid != current_session._user.userid and not current_session._user.has_permission(permissions.SHOW_OTHER):
|
||||||
userid != current_session._user.userid and not current_session._user.has_permission(permissions.SHOW_OTHER)
|
|
||||||
):
|
|
||||||
raise Forbidden
|
raise Forbidden
|
||||||
|
|
||||||
# Might raise NotFound
|
# Might raise NotFound
|
||||||
|
|
|
@ -13,12 +13,11 @@ from flaschengeist.controller import roleController
|
||||||
|
|
||||||
roles_bp = Blueprint("roles", __name__)
|
roles_bp = Blueprint("roles", __name__)
|
||||||
_permission_edit = "roles_edit"
|
_permission_edit = "roles_edit"
|
||||||
_permission_delete = "roles_delete"
|
|
||||||
|
|
||||||
|
|
||||||
class RolesPlugin(Plugin):
|
class RolesPlugin(Plugin):
|
||||||
def __init__(self, config):
|
def __init__(self, config):
|
||||||
super().__init__(config, roles_bp, permissions=[_permission_edit, _permission_delete])
|
super().__init__(config, roles_bp, permissions=[_permission_edit])
|
||||||
|
|
||||||
|
|
||||||
@roles_bp.route("/roles", methods=["GET"])
|
@roles_bp.route("/roles", methods=["GET"])
|
||||||
|
@ -125,7 +124,7 @@ def edit_role(role_name, current_session):
|
||||||
|
|
||||||
|
|
||||||
@roles_bp.route("/roles/<role_name>", methods=["DELETE"])
|
@roles_bp.route("/roles/<role_name>", methods=["DELETE"])
|
||||||
@login_required(permission=_permission_delete)
|
@login_required(permission=_permission_edit)
|
||||||
def delete_role(role_name, current_session):
|
def delete_role(role_name, current_session):
|
||||||
"""Delete role
|
"""Delete role
|
||||||
|
|
||||||
|
@ -136,7 +135,7 @@ def delete_role(role_name, current_session):
|
||||||
current_session: Session sent with Authorization Header
|
current_session: Session sent with Authorization Header
|
||||||
|
|
||||||
Returns:
|
Returns:
|
||||||
HTTP-200 or HTTP error
|
HTTP-204 or HTTP error
|
||||||
"""
|
"""
|
||||||
role = roleController.get(role_name)
|
role = roleController.get(role_name)
|
||||||
roleController.delete(role)
|
roleController.delete(role)
|
||||||
|
|
Loading…
Reference in New Issue