def get_item_with_permission(list_id, item_id, user_id):
thelist, list_owner = get_list_with_permission(list_id, user_id)
item = Item.fetch_one(
list_id=thelist.id,
id=item_id
)
return item, list_owner
def editItemView(list_id, item_id):
''' View for editing an item
'''
error_message = None
update_status = None
item, list_owner = get_item_with_permission(
list_id,
item_id,
session['user_id']
)
if not list_owner:
return flask.abort(403)
if request.method == 'POST':
try:
Item.update(request.form, id=item_id)
update_status = True
render_item = Item.fetch_one(
id=item.id
)
except Exception, e:
update_status = False
error_message = str(e)
render_item = dict_to_obj(request.form.to_dict())
