"edit": Finally implement saving.
Currently no checks. Probably not so good. And especially, every logged in user currently can edit the data for any other user's media.
This commit is contained in:
@@ -1,6 +1,6 @@
|
||||
|
||||
|
||||
from webob import Response
|
||||
from webob import Response, exc
|
||||
|
||||
from mediagoblin.edit import forms
|
||||
from mediagoblin.decorators import require_active_login, get_media_entry_by_id
|
||||
@@ -13,6 +13,17 @@ def edit_media(request, media):
|
||||
slug = media['slug'],
|
||||
description = media['description'])
|
||||
|
||||
if request.method == 'POST' and form.validate():
|
||||
media['title'] = request.POST['title']
|
||||
media['description'] = request.POST['description']
|
||||
media['slug'] = request.POST['slug']
|
||||
media.save()
|
||||
|
||||
# redirect
|
||||
return exc.HTTPFound(
|
||||
location=request.urlgen("mediagoblin.user_pages.media_home",
|
||||
user=media.uploader()['username'], media=media['_id']))
|
||||
|
||||
# render
|
||||
template = request.template_env.get_template(
|
||||
'mediagoblin/edit/edit.html')
|
||||
|
||||
Reference in New Issue
Block a user