From 8f4418c2b0b1027032594bf8d02e68bcc0ad6316 Mon Sep 17 00:00:00 2001
From: Cédric Bonhomme <cedric@cedricbonhomme.org>
Date: Tue, 19 Apr 2016 22:10:52 +0200
Subject: Added a blueprint for the Flask-Restless feed api.

---
 src/web/views/api/v3/feed.py | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 src/web/views/api/v3/feed.py

(limited to 'src/web/views/api/v3/feed.py')

diff --git a/src/web/views/api/v3/feed.py b/src/web/views/api/v3/feed.py
new file mode 100644
index 00000000..ef1b415f
--- /dev/null
+++ b/src/web/views/api/v3/feed.py
@@ -0,0 +1,30 @@
+from flask.ext.login import current_user
+from web import models
+from bootstrap import application, manager
+from web.controllers import FeedController
+from web.views.api.v3.common import AbstractProcessor
+from web.views.api.v3.common import url_prefix, auth_func
+
+class FeedProcessor(AbstractProcessor):
+    def get_single_preprocessor(self, instance_id=None, **kw):
+        # Check if the user is authorized to modify the specified
+        # instance of the model.
+        contr = FeedController(current_user.id)
+        feed = contr.get(id=instance_id)
+        if not self.is_authorized_to_modify(current_user, feed):
+            raise ProcessingException(description='Not Authorized', code=401)
+
+
+feed_processor = FeedProcessor()
+
+blueprint_feed = manager.create_api_blueprint(models.Feed,
+        url_prefix=url_prefix,
+        methods=['GET', 'POST', 'PUT', 'DELETE'],
+        preprocessors=dict(GET_SINGLE=[auth_func,
+                                    feed_processor.get_single_preprocessor],
+                           GET_MANY=[auth_func,
+                                    feed_processor.get_many_preprocessor],
+                           PUT_SINGLE=[auth_func],
+                           POST=[auth_func],
+                           DELETE=[auth_func]))
+application.register_blueprint(blueprint_feed)
-- 
cgit