def update(card_id, id):
authz.require(authz.logged_in())
reference = obj_or_404(Reference.by_id(id, card_id=card_id))
reference.save(request_data(), reference.card, g.user)
db.session.commit()
return jsonify(reference)
def delete(card_id, id):
authz.require(authz.logged_in())
reference = obj_or_404(Reference.by_id(id, card_id=card_id))
db.session.delete(reference)
db.session.commit()
raise Gone()
def view(card_id, id):
authz.require(authz.logged_in())
reference = obj_or_404(Reference.by_id(id, card_id=card_id))
return jsonify(reference)
