def get_list_with_permission(list_id, user_id): try: thelist = List.fetch_one(id=list_id, user_id=user_id) list_owner = True except NoResultFound: thelist = FriendList.fetch_one( list_id=list_id, friend_email=user_id ) list_owner = False thelist = List.fetch_one(id=list_id) except NoResultFound: return flask.abort(403) return thelist, list_owner
def listDeleteView(list_id): ''' View to delete a single list ''' try: thelist = List.fetch_one(id=list_id, user_id=session['user_id']) List.delete(id=thelist.id, user_id=session['user_id']) status = 'ok' except NoResultFound: return flask.abort(403) return jsonify({'status': status})