forked from orson/bachemap
fixed pin deletion logic
This commit is contained in:
parent
b118d71366
commit
50c17975e3
9
app.py
9
app.py
@ -192,11 +192,14 @@ def create_app(config=Config):
|
|||||||
print(actual_pin)
|
print(actual_pin)
|
||||||
added_by = actual_pin.get("added_by")
|
added_by = actual_pin.get("added_by")
|
||||||
print(added_by)
|
print(added_by)
|
||||||
if not current_user.is_admin or current_user.id != added_by:
|
print(current_user.id)
|
||||||
return redirect(url_for('index'))
|
if current_user.is_admin or current_user.id == added_by:
|
||||||
else:
|
|
||||||
mongo.db.pins.delete_one({"_id": ObjectId(pin_id)})
|
mongo.db.pins.delete_one({"_id": ObjectId(pin_id)})
|
||||||
return redirect(url_for('dashboard'))
|
return redirect(url_for('dashboard'))
|
||||||
|
else:
|
||||||
|
return redirect(url_for('index'))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
@app.route('/dashboard')
|
@app.route('/dashboard')
|
||||||
@login_required
|
@login_required
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user