def get_list(id): list = List.query.get_or_404(id) if session['user_id'] not in [user.id for user in list.board.users]: return abort(403) list_json = list_schema.dump(list) return jsonify(list_json.data)
def post_list(): try: data = request.get_json() if data is None: return jsonify({'Error': 'Incorect form of request'}), 400 board = Board.query.get_or_404(data['board']) if session['user_id'] not in [user.id for user in board.users]: return abort(403) list = List(title=data['title']) board.lists.append(list) db.session.add(list) list_json = list_schema.dump(list) return jsonify(list_json.data) except KeyError: return jsonify({'Error': 'Incorect form of request'}), 400