forked from orson/bachemap
fixed pin deletion logic
This commit is contained in:
parent
b118d71366
commit
50c17975e3
9
app.py
9
app.py
@ -192,11 +192,14 @@ def create_app(config=Config):
|
||||
print(actual_pin)
|
||||
added_by = actual_pin.get("added_by")
|
||||
print(added_by)
|
||||
if not current_user.is_admin or current_user.id != added_by:
|
||||
return redirect(url_for('index'))
|
||||
else:
|
||||
print(current_user.id)
|
||||
if current_user.is_admin or current_user.id == added_by:
|
||||
mongo.db.pins.delete_one({"_id": ObjectId(pin_id)})
|
||||
return redirect(url_for('dashboard'))
|
||||
else:
|
||||
return redirect(url_for('index'))
|
||||
|
||||
|
||||
|
||||
@app.route('/dashboard')
|
||||
@login_required
|
||||
|
||||
Loading…
Reference in New Issue
Block a user