1
0
forked from orson/bachemap

fixed pin deletion logic

This commit is contained in:
kprftw 2024-09-08 20:04:19 -06:00
parent b118d71366
commit 50c17975e3

9
app.py
View File

@ -192,11 +192,14 @@ def create_app(config=Config):
print(actual_pin) print(actual_pin)
added_by = actual_pin.get("added_by") added_by = actual_pin.get("added_by")
print(added_by) print(added_by)
if not current_user.is_admin or current_user.id != added_by: print(current_user.id)
return redirect(url_for('index')) if current_user.is_admin or current_user.id == added_by:
else:
mongo.db.pins.delete_one({"_id": ObjectId(pin_id)}) mongo.db.pins.delete_one({"_id": ObjectId(pin_id)})
return redirect(url_for('dashboard')) return redirect(url_for('dashboard'))
else:
return redirect(url_for('index'))
@app.route('/dashboard') @app.route('/dashboard')
@login_required @login_required