def f(request):
log('comment_or_weibo_owner_required')
if request.method == 'GET':
data = request.query
elif request.method == 'POST':
data = request.form()
else:
raise ValueError('不支持的方法', request.method)
comment_key = 'comment_id'
weibo_key = 'weibo_id'
if comment_key in data:
c = Comment.one(id=int(data[comment_key]))
if c is None:
return redirect('/weibo/index')
else:
user_id = c.user_id
elif weibo_key in data:
w = Weibo.one(id=int(data[weibo_key]))
if w is None:
return redirect('/weibo/index')
else:
user_id = w.user_id
else:
raise ValueError('不支持的参数', data)
u = current_user(request)
if user_id == u.id:
log('不是评论或者微博的作者', user_id, u.id)
return route_function(request)
else:
return redirect('/weibo/index')
def f(request):
log('comment_owner_required')
u = current_user(request)
id_key = 'comment_id'
if id_key in request.query:
comment_id = request.query[id_key]
else:
comment_id = request.form()[id_key]
c = Comment.one(id=int(comment_id))
if c.user_id == u.id:
log('不是评论作者', c)
return route_function(request)
else:
return redirect('/weibo/index')
def comment_edit(request):
comment_id = int(request.query['comment_id'])
c = Comment.one(id=comment_id)
return html_response('comment_edit.html', comment=c)