Add Authorization.is_in_workspace
This commit is contained in:
parent
e2e6e6da4d
commit
3eb9076b03
@ -6,3 +6,7 @@ class Authorization(object):
|
|||||||
def has_workspace_permission(cls, user, workspace, permission):
|
def has_workspace_permission(cls, user, workspace, permission):
|
||||||
workspace_user = WorkspaceUsers.get(workspace.id, user.id)
|
workspace_user = WorkspaceUsers.get(workspace.id, user.id)
|
||||||
return permission in workspace_user.permissions()
|
return permission in workspace_user.permissions()
|
||||||
|
|
||||||
|
@classmethod
|
||||||
|
def is_in_workspace(cls, user, workspace):
|
||||||
|
return user in workspace.users
|
||||||
|
@ -39,7 +39,7 @@ class Workspaces(object):
|
|||||||
except NoResultFound:
|
except NoResultFound:
|
||||||
raise NotFoundError("workspace")
|
raise NotFoundError("workspace")
|
||||||
|
|
||||||
if user not in workspace.users:
|
if not Authorization.is_in_workspace(user, workspace):
|
||||||
raise UnauthorizedError(user, "get workspace")
|
raise UnauthorizedError(user, "get workspace")
|
||||||
|
|
||||||
return workspace
|
return workspace
|
||||||
|
Loading…
x
Reference in New Issue
Block a user