Use check_workspace_permission
helper
This commit is contained in:
parent
d6da217e08
commit
f0664e254c
@ -70,10 +70,12 @@ def workspace_members(workspace_id):
|
|||||||
@bp.route("/workspaces/<workspace_id>/reports")
|
@bp.route("/workspaces/<workspace_id>/reports")
|
||||||
def workspace_reports(workspace_id):
|
def workspace_reports(workspace_id):
|
||||||
workspace = Workspaces.get(g.current_user, workspace_id)
|
workspace = Workspaces.get(g.current_user, workspace_id)
|
||||||
if not Authorization.has_workspace_permission(
|
Authorization.check_workspace_permission(
|
||||||
g.current_user, workspace, Permissions.VIEW_USAGE_DOLLARS
|
g.current_user,
|
||||||
):
|
workspace,
|
||||||
raise UnauthorizedError(g.current_user, "view workspace reports")
|
Permissions.VIEW_USAGE_DOLLARS,
|
||||||
|
"view workspace reports",
|
||||||
|
)
|
||||||
|
|
||||||
alternate_reports = http_request.args.get("alternate")
|
alternate_reports = http_request.args.get("alternate")
|
||||||
month = http_request.args.get("month", 3)
|
month = http_request.args.get("month", 3)
|
||||||
|
Loading…
x
Reference in New Issue
Block a user