def lists(owner_id):
owner = User.query.get_or_404(owner_id)
if request.method == 'POST':
return post(lambda: List(owner=owner), ListForm, owner)
todo_lists = List.query.order_by(List.created).filter(List.owner == owner)
if owner != current_user:
todo_lists = todo_lists.filter(List.is_public == True)
prepped_todo_lists = prep_query_for_json(todo_lists)
return json_response(prepped_todo_lists)
def items(owner_id, list_slug):
query = List.query.filter_by(owner_id=owner_id, slug=list_slug)
todo_list = query.first_or_404()
if not todo_list.is_public and todo_list.owner != current_user:
abort(404)
if request.method == 'POST':
return post(lambda: Item(todo_list=todo_list), ItemForm,
todo_list.owner)
prepped_items = prep_query_for_json(todo_list.items)
return json_response(prepped_items)
