def lists(owner_id): owner = User.query.get_or_404(owner_id) if request.method == 'POST': return post(lambda: List(owner=owner), ListForm, owner) todo_lists = List.query.order_by(List.created).filter(List.owner == owner) if owner != current_user: todo_lists = todo_lists.filter(List.is_public == True) prepped_todo_lists = prep_query_for_json(todo_lists) return json_response(prepped_todo_lists)
def items(owner_id, list_slug): query = List.query.filter_by(owner_id=owner_id, slug=list_slug) todo_list = query.first_or_404() if not todo_list.is_public and todo_list.owner != current_user: abort(404) if request.method == 'POST': return post(lambda: Item(todo_list=todo_list), ItemForm, todo_list.owner) prepped_items = prep_query_for_json(todo_list.items) return json_response(prepped_items)