Пример #1
0
        def _(*args, **kwargs):
            if g.istrpc == 1:
                return func(*args, **kwargs)
            if g.is_admin == 1:
                return func(*args, **kwargs)

            roles = [
                i['name']
                for i in UserBusiness.query_json_by_id(g.userid)[0]['role']
            ]

            project = None
            if request.args and 'project_id' in request.args:
                project = request.args.get('project_id')
            if request.json and 'project_id' in request.json:
                project = request.json.get('project_id')

            project_list = UserBusiness.own_in_project()
            if project and _is_owneristrator(
                    roles) and project_list and _is_have_project(
                        int(project), project_list):
                return func(*args, **kwargs)

            abilities = AuthBusiness.query_ability_by_role_name(roles)

            if _has_ability(ability, abilities):
                return func(*args, **kwargs)
            raise OperationPermissionDeniedException
Пример #2
0
def required_no_pid_no_dec(ability=None):
    if g.istrpc == 1:
        return 1
    if g.is_admin == 1:
        return 1

    roles = [
        i['name'] for i in UserBusiness.query_json_by_id(g.userid)[0]['role']
    ]

    project = None
    if request.args and 'project_id' in request.args:
        project = request.args.get('project_id')
    if request.json and 'project_id' in request.json:
        project = request.json.get('project_id')

    project_list = UserBusiness.own_in_project()
    if project and is_owneristrator(
            roles) and project_list and is_have_project(
                int(project), project_list):
        return 1

    abilities = AuthBusiness.query_ability_by_role_name(roles)

    if has_ability(ability, abilities):
        return 1
    return 0
Пример #3
0
def get_project_list():
    project_list = UserBusiness.own_in_project()
    return json_detail_render(0, project_list)