Dot-Notation for Users.is_admin
This commit is contained in:
parent
00bb95502e
commit
bec591d85b
@ -59,7 +59,7 @@ def user_may_delete_media(controller):
|
||||
def wrapper(request, *args, **kwargs):
|
||||
uploader = request.db.MediaEntry.find_one(
|
||||
{'_id': ObjectId(request.matchdict['media'])}).get_uploader()
|
||||
if not (request.user['is_admin'] or
|
||||
if not (request.user.is_admin or
|
||||
request.user._id == uploader._id):
|
||||
return exc.HTTPForbidden()
|
||||
|
||||
|
@ -19,6 +19,6 @@ def may_edit_media(request, media):
|
||||
"""Check, if the request's user may edit the media details"""
|
||||
if media['uploader'] == request.user._id:
|
||||
return True
|
||||
if request.user['is_admin']:
|
||||
if request.user.is_admin:
|
||||
return True
|
||||
return False
|
||||
|
@ -78,7 +78,7 @@ def edit_media(request, media):
|
||||
return exc.HTTPFound(
|
||||
location=media.url_for_self(request.urlgen))
|
||||
|
||||
if request.user['is_admin'] \
|
||||
if request.user.is_admin \
|
||||
and media['uploader'] != request.user._id \
|
||||
and request.method != 'POST':
|
||||
messages.add_message(
|
||||
@ -147,7 +147,7 @@ def edit_attachments(request, media):
|
||||
def edit_profile(request):
|
||||
# admins may edit any user profile given a username in the querystring
|
||||
edit_username = request.GET.get('username')
|
||||
if request.user['is_admin'] and request.user.username != edit_username:
|
||||
if request.user.is_admin and request.user.username != edit_username:
|
||||
user = request.db.User.find_one({'username': edit_username})
|
||||
# No need to warn again if admin just submitted an edited profile
|
||||
if request.method != 'POST':
|
||||
|
@ -73,7 +73,7 @@ def makeadmin(args):
|
||||
|
||||
user = db.User.one({'username': unicode(args.username.lower())})
|
||||
if user:
|
||||
user['is_admin'] = True
|
||||
user.is_admin = True
|
||||
user.save()
|
||||
print 'The user is now Admin'
|
||||
else:
|
||||
|
@ -116,7 +116,7 @@
|
||||
{% include "mediagoblin/utils/prev_next.html" %}
|
||||
|
||||
{% if media['uploader'] == request.user._id or
|
||||
request.user['is_admin'] %}
|
||||
request.user.is_admin %}
|
||||
<p>
|
||||
{% set edit_url = request.urlgen('mediagoblin.edit.edit_media',
|
||||
user= media.get_uploader().username,
|
||||
@ -146,7 +146,7 @@
|
||||
|
||||
{% if app_config['allow_attachments']
|
||||
and (media['uploader'] == request.user._id
|
||||
or request.user['is_admin']) %}
|
||||
or request.user.is_admin) %}
|
||||
<p>
|
||||
<a href="{{ request.urlgen('mediagoblin.edit.attachments',
|
||||
user=media.get_uploader().username,
|
||||
|
@ -113,7 +113,7 @@
|
||||
{% else %}
|
||||
<div class="grid_6 alpha">
|
||||
{% include "mediagoblin/utils/profile.html" %}
|
||||
{% if request.user._id == user._id or request.user['is_admin'] %}
|
||||
{% if request.user._id == user._id or request.user.is_admin %}
|
||||
<a href="{{ request.urlgen('mediagoblin.edit.profile') }}?username={{
|
||||
user.username }}">
|
||||
{%- trans %}Edit profile{% endtrans -%}
|
||||
|
@ -191,7 +191,7 @@ def media_confirm_delete(request, media):
|
||||
return exc.HTTPFound(
|
||||
location=media.url_for_self(request.urlgen))
|
||||
|
||||
if ((request.user[u'is_admin'] and
|
||||
if ((request.user.is_admin and
|
||||
request.user._id != media.get_uploader()._id)):
|
||||
messages.add_message(
|
||||
request, messages.WARNING,
|
||||
|
Loading…
x
Reference in New Issue
Block a user