def submit_post(key):
user = active_user()
if has_permission(user,'create-post'):
post = Post()
thread = Thread.load(decrypt(key))
content = bottle.request.forms.get("content","").strip()
assert len(content)>0
post.update({"content":content,"owner":user.key})
thread.posts.append(post)
thread.save()
post.save()
