forked from enviPath/enviPy
[Chore] Linted Files (#150)
Co-authored-by: Tim Lorsbach <tim@lorsba.ch> Reviewed-on: enviPath/enviPy#150
This commit is contained in:
@ -8,9 +8,9 @@ from epdb.models import Package
|
||||
|
||||
# Map HTTP methods to required permissions
|
||||
DEFAULT_METHOD_PERMISSIONS = {
|
||||
'GET': 'read',
|
||||
'POST': 'write',
|
||||
'DELETE': 'write',
|
||||
"GET": "read",
|
||||
"POST": "write",
|
||||
"DELETE": "write",
|
||||
}
|
||||
|
||||
|
||||
@ -22,6 +22,7 @@ def package_permission_required(method_permissions=None):
|
||||
@wraps(view_func)
|
||||
def _wrapped_view(request, package_uuid, *args, **kwargs):
|
||||
from epdb.views import _anonymous_or_real
|
||||
|
||||
user = _anonymous_or_real(request)
|
||||
permission_required = method_permissions[request.method]
|
||||
|
||||
@ -30,11 +31,12 @@ def package_permission_required(method_permissions=None):
|
||||
|
||||
if not PackageManager.has_package_permission(user, package_uuid, permission_required):
|
||||
from epdb.views import error
|
||||
|
||||
return error(
|
||||
request,
|
||||
"Operation failed!",
|
||||
f"Couldn't perform the desired operation as {user.username} does not have the required permissions!",
|
||||
code=403
|
||||
code=403,
|
||||
)
|
||||
|
||||
return view_func(request, package_uuid, *args, **kwargs)
|
||||
|
||||
Reference in New Issue
Block a user