diff options
author | rubenwardy <rw@rubenwardy.com> | 2018-03-20 03:54:38 +0000 |
---|---|---|
committer | rubenwardy <rw@rubenwardy.com> | 2018-03-20 03:54:38 +0000 |
commit | 73f24add6184555567d91fdcfb0e255391800c4f (patch) | |
tree | e9d0356eb875b4d6aca58426c025404b25ffd996 /app/models.py | |
parent | bd58f9bee9a93c9b001e69b7b09c9d51dd6f2945 (diff) | |
download | cheatdb-73f24add6184555567d91fdcfb0e255391800c4f.tar.xz |
Add permission validation to Package.checkPerm()
Diffstat (limited to 'app/models.py')
-rw-r--r-- | app/models.py | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/app/models.py b/app/models.py index ca77979..0021e1d 100644 --- a/app/models.py +++ b/app/models.py @@ -141,6 +141,8 @@ class Package(db.Model): if type(perm) == str: perm = Permission[perm] + elif type(perm) != Permission: + raise Exception("Unknown permission given to Package.checkPerm()") isOwner = user == self.author @@ -158,7 +160,7 @@ class Package(db.Model): return user.rank.atLeast(UserRank.MODERATOR) else: - return False + raise Exception("Permission {} is not related to packages".format(perm.name)) # Setup Flask-User db_adapter = SQLAlchemyAdapter(db, User) # Register the User model |