def checker_function(*args, **kwargs):
vm = ViewModelBase()
if not vm.user:
log.notice(
f"Anonymous user attempting to access admin action, BLOCKED.")
return flask.abort(status=403)
if not vm.user.is_admin:
log.notice(
f"Non-admin user attempting to access admin action: {vm.user.email}, BLOCKED."
)
return flask.abort(status=403)
log.trace(f"User permitted admin action: {vm.user.email}")
return view_function(*args, **kwargs)
def index():
vm = ViewModelBase()
return vm.to_dict()
def about():
vm = ViewModelBase()
# If you don't use the @response, we'd return like this:
# return flask.render_template('home/about.html')
return vm.to_dict()
def about():
vm = ViewModelBase()
return vm.to_dict()
def index():
vm = ViewModelBase()
log.info(f"User viewing admin index: {vm.user.email}")
return vm.to_dict()
def about():
"""About page."""
vm = ViewModelBase()
return vm.to_dict()
def checker_function(*args, **kwargs):
vm = ViewModelBase()
if not vm.user or not vm.user.is_admin:
return flask.abort(status=403)
return view_function(*args, **kwargs)