def update(id): relation = object_or_404(Relation.by_id(id)) authz.require(authz.project_edit(relation.project)) data = request_data({'author': request.account}) relation = relations.save(data, relation=relation) db.session.commit() return jsonify(relations.to_rest(relation))
def create(): data = request_data({'author': request.account}) project = ProjectRef().get(data.get('project')) data['project'] = project authz.require(authz.project_edit(project)) relation = relations.save(data) db.session.commit() return jsonify(relations.to_rest(relation))
def view(id): relation = object_or_404(Relation.by_id(id)) return jsonify(relations.to_rest(relation))
def view(id): relation = object_or_404(Relation.by_id(id)) authz.require(authz.project_read(relation.project)) return jsonify(relations.to_rest(relation))