diff options
| author | rubenwardy <rw@rubenwardy.com> | 2018-05-13 16:56:18 +0100 |
|---|---|---|
| committer | rubenwardy <rw@rubenwardy.com> | 2018-05-13 16:56:18 +0100 |
| commit | f3c433de06e19ae9a6e1706b4746d46e6a33d70c (patch) | |
| tree | a44f252f38f91105a61ffb322a4ff7f2000c8213 /app/views/users.py | |
| parent | 167a9f14cdce9c01a0097e86a46e45438ed88628 (diff) | |
| download | cheatdb-f3c433de06e19ae9a6e1706b4746d46e6a33d70c.tar.xz | |
Restrict user list page to moderators only
Diffstat (limited to 'app/views/users.py')
| -rw-r--r-- | app/views/users.py | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/app/views/users.py b/app/views/users.py index 3ac37c2..995f09c 100644 --- a/app/views/users.py +++ b/app/views/users.py @@ -8,6 +8,7 @@ from flask_wtf import FlaskForm from flask_user.forms import RegisterForm from wtforms import * from wtforms.validators import * +from .utils import rank_required class MyRegisterForm(RegisterForm): display_name = StringField("Display name") @@ -19,6 +20,7 @@ class UserProfileForm(FlaskForm): submit = SubmitField("Save") @app.route("/users/", methods=["GET"]) +@rank_required(UserRank.MODERATOR) def user_list_page(): users = User.query.all() return render_template("users/list.html", users=users) |