def update():
data = request.json
comment_id = int(data.get('id', -1))
c = Comment.find_by(id=comment_id)
c.content = data.get('content')
c.save()
return jsonify(c.json())
def decorated_function(*args, **kwargs):
u = current_user()
model_name = request.path.split('/')[-2]
# 根据不同请求方法，获取实例的 id
if request.method == 'POST':
data = request.json
id = int(data.get('id'))
else:
id = int(request.args.get('id'))
# 根据 model 的名字，判断从哪里获取实例
path_dict = dict(
weibo=Weibo.find_by(id=id),
comment=Comment.find_by(id=id),
blog=Blog.find_by(id=id),
blogComment=BlogComment.find_by(id=id),
)
instance = path_dict.get(model_name)
user_id = instance.user_id
# 检查登录用户 id 与实例的 user_id 是否一致
if u.id == user_id:
return f(*args, **kwargs)
else:
log("{} try to access {}'s data\r\n".format(u.username, instance.username))
return redirect('#')
