forked from rDrama/rDrama
restrict approving and rejecting marseys to the fish
parent
47890d771d
commit
b8cde6ca60
|
@ -491,6 +491,8 @@ def submit_marsey(v):
|
||||||
@app.post("/admin/approve/marsey/<name>")
|
@app.post("/admin/approve/marsey/<name>")
|
||||||
@admin_level_required(3)
|
@admin_level_required(3)
|
||||||
def approve_marsey(v, name):
|
def approve_marsey(v, name):
|
||||||
|
if v.id != CARP_ID: abort(403)
|
||||||
|
|
||||||
marsey = g.db.query(Marsey).filter_by(name=name).one_or_none()
|
marsey = g.db.query(Marsey).filter_by(name=name).one_or_none()
|
||||||
if not marsey: abort(404)
|
if not marsey: abort(404)
|
||||||
|
|
||||||
|
@ -522,6 +524,8 @@ def approve_marsey(v, name):
|
||||||
@app.post("/admin/reject/marsey/<name>")
|
@app.post("/admin/reject/marsey/<name>")
|
||||||
@admin_level_required(3)
|
@admin_level_required(3)
|
||||||
def reject_marsey(v, name):
|
def reject_marsey(v, name):
|
||||||
|
if v.id != CARP_ID: abort(403)
|
||||||
|
|
||||||
marsey = g.db.query(Marsey).filter_by(name=name).one_or_none()
|
marsey = g.db.query(Marsey).filter_by(name=name).one_or_none()
|
||||||
if not marsey: abort(404)
|
if not marsey: abort(404)
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue