from app import app, db from app.models.post import Post from app.utils.render import render from app.forms.forum import CommentEditForm, AnonymousCommentEditForm from flask import redirect, url_for, abort from flask_login import login_required, current_user @app.route('/post/', methods=['GET','POST']) # TODO: Allow guest edit of posts @login_required def edit_post(postid): p = Post.query.filter_by(id=postid).first_or_404() # TODO: Check whether privileged user has access to board if p.author != current_user and not current_user.priv("edit-posts"): abort(403) if p.type == "comment": form = CommentEditForm() if form.validate_on_submit(): p.text = form.message.data if form.submit.data: db.session.add(p) db.session.commit() # TODO: Proper redirection return redirect(url_for('index')) form.message.data = p.text return render('forum/edit_comment.html', comment=p, form=form) else: abort(404)