def user_edit(user_id): user = User.find_by_id(user_id) if request.method == 'POST': try: is_admin = request.form.get('is-admin') password = request.form.get('password') user.username = request.form.get('username') # user.password = User.generate_hash(password) # if User.verify_hash(password, current_user.password): # user.password = password user.address = request.form.get('address') if is_admin: user.role = 'admin' db.session.commit() return redirect(url_for('admin.users')) except IntegrityError: db.session.rollback() flash('ERROR! username ({}) already exists.'.format(user.username), 'error') return render_template('user_edit.html', user=user)
def user_delete(user_id): if current_user.role != 'admin': return redirect(url_for('home.home')) user = User.find_by_id(user_id) db.session.delete(user) db.session.commit() return redirect(url_for('admin.users'))
def user_delete(user_id): user = User.find_by_id(user_id) db.session.delete(user) db.session.commit() return redirect(url_for('admin.users'))