From 8bbfd0e080ac5ef1232cca0663f77e1562c1485e Mon Sep 17 00:00:00 2001 From: François Schmidts Date: Mon, 6 Jul 2015 23:09:24 +0200 Subject: making it possible for super admin to update other's feed --- pyaggr3g470r/views/api/common.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) (limited to 'pyaggr3g470r/views/api/common.py') diff --git a/pyaggr3g470r/views/api/common.py b/pyaggr3g470r/views/api/common.py index b8c4dd9d..a7068807 100644 --- a/pyaggr3g470r/views/api/common.py +++ b/pyaggr3g470r/views/api/common.py @@ -143,7 +143,11 @@ class PyAggResourceExisting(PyAggAbstractResource): args = self.reqparse_args(default=False) new_values = {key: args[key] for key in set(args).intersection(self.attrs)} - self.controller.update({'id': obj_id}, new_values) + if 'user_id' in new_values and g.user.is_admin(): + controller = self.wider_controller + else: + controller = self.controller + return controller.update({'id': obj_id}, new_values), 200 def delete(self, obj_id=None): """delete a object""" -- cgit