def wrapper(request, *args, **kwargs):
uploader = request.db.MediaEntry.find_one(
{'_id': ObjectId(request.matchdict['media'])}).get_uploader()
- if not (request.user['is_admin'] or
+ if not (request.user.is_admin or
request.user._id == uploader._id):
return exc.HTTPForbidden()
"""Check, if the request's user may edit the media details"""
if media['uploader'] == request.user._id:
return True
- if request.user['is_admin']:
+ if request.user.is_admin:
return True
return False
return exc.HTTPFound(
location=media.url_for_self(request.urlgen))
- if request.user['is_admin'] \
+ if request.user.is_admin \
and media['uploader'] != request.user._id \
and request.method != 'POST':
messages.add_message(
def edit_profile(request):
# admins may edit any user profile given a username in the querystring
edit_username = request.GET.get('username')
- if request.user['is_admin'] and request.user.username != edit_username:
+ if request.user.is_admin and request.user.username != edit_username:
user = request.db.User.find_one({'username': edit_username})
# No need to warn again if admin just submitted an edited profile
if request.method != 'POST':
user = db.User.one({'username': unicode(args.username.lower())})
if user:
- user['is_admin'] = True
+ user.is_admin = True
user.save()
print 'The user is now Admin'
else:
{% include "mediagoblin/utils/prev_next.html" %}
{% if media['uploader'] == request.user._id or
- request.user['is_admin'] %}
+ request.user.is_admin %}
<p>
{% set edit_url = request.urlgen('mediagoblin.edit.edit_media',
user= media.get_uploader().username,
{% if app_config['allow_attachments']
and (media['uploader'] == request.user._id
- or request.user['is_admin']) %}
+ or request.user.is_admin) %}
<p>
<a href="{{ request.urlgen('mediagoblin.edit.attachments',
user=media.get_uploader().username,
{% else %}
<div class="grid_6 alpha">
{% include "mediagoblin/utils/profile.html" %}
- {% if request.user._id == user._id or request.user['is_admin'] %}
+ {% if request.user._id == user._id or request.user.is_admin %}
<a href="{{ request.urlgen('mediagoblin.edit.profile') }}?username={{
user.username }}">
{%- trans %}Edit profile{% endtrans -%}
return exc.HTTPFound(
location=media.url_for_self(request.urlgen))
- if ((request.user[u'is_admin'] and
+ if ((request.user.is_admin and
request.user._id != media.get_uploader()._id)):
messages.add_message(
request, messages.WARNING,