Skip to content

Sync #25

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 9 commits into from
Closed

Sync #25

Changes from 1 commit
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
a3e3e7e
fix "NameError: name 'traceback' is not defined"
zhangchunlin Apr 26, 2019
155298c
merge README content from TommyLemon.
zhangchunlin Apr 26, 2019
d1576ac
change hook function names; change "type" to "component" in fields co…
zhangchunlin Apr 30, 2019
d1ff139
fix DISALLOW and NECESSARY get wrongly problem
zhangchunlin Apr 30, 2019
8eeafbb
more strict check to tag_POST; support DISALLOW in apijson_put
zhangchunlin May 7, 2019
02d2818
bump version number to 0.1.1
zhangchunlin May 7, 2019
463878a
update example of APIJSON_REQUESTS
zhangchunlin May 9, 2019
dc0bae1
add custom_tcolumns_render_generator prop; deault component is input …
zhangchunlin May 9, 2019
f6133f8
add functions.get_apijson_table
zhangchunlin May 9, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
more strict check to tag_POST; support DISALLOW in apijson_put
  • Loading branch information
@zhangchunlin
zhangchunlin committed May 7, 2019
commit 8eeafbbbf35123e81eaa0c037d5e26f0fddb9ea4
15 changes: 12 additions & 3 deletions uliweb_apijson/apijson/views.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -373,6 +373,8 @@ def _post_one(self,key,tag):
if not request_tag_config:
return json({"code":400,"msg":"tag '%s' not found"%(tag)})
tag_POST = request_tag_config.get("POST",{})
if not tag_POST:
return json({"code":400,"msg":"tag '%s' not support apijson_post"%(tag)})
ADD = tag_POST.get("ADD")
if ADD:
ADD_role = ADD.get("@role")
Expand Down Expand Up @@ -501,9 +503,9 @@ def _put_one(self,key,tag):
return json({"code":400,"msg":"cannot find record id '%s'"%(id_)})

permission_check_ok = False
PUT = model_setting.get("PUT")
if PUT:
roles = PUT.get("roles")
model_PUT = model_setting.get("PUT")
if model_PUT:
roles = model_PUT.get("roles")
if params_role:
if not params_role in roles:
return json({"code":400,"msg":"'%s' not accessible by role '%s'"%(modelname,params_role)})
Expand All @@ -529,6 +531,13 @@ def _put_one(self,key,tag):
if not permission_check_ok:
return json({"code":400,"msg":"no permission"})

DISALLOW = tag_PUT.get("DISALLOW")
if DISALLOW:
for field in DISALLOW:
if field in params:
log.error("request '%s' disallow '%s'"%(tag,field))
return json({"code":400,"msg":"request '%s' disallow '%s'"%(tag,field)})

kwargs = {}
for k in params:
if k=="id":
Expand Down