Restrict user list page to moderators only
This commit is contained in:
parent
167a9f14cd
commit
f3c433de06
|
@ -6,6 +6,7 @@
|
||||||
|
|
||||||
{% block content %}
|
{% block content %}
|
||||||
<ul>
|
<ul>
|
||||||
<a href="{{ url_for('switch_user_page') }}">Sign in as another user</a>
|
<li><a href="{{ url_for('user_list_page') }}">User list</a></li>
|
||||||
|
<li><a href="{{ url_for('switch_user_page') }}">Sign in as another user</a></li>
|
||||||
</ul>
|
</ul>
|
||||||
{% endblock %}
|
{% endblock %}
|
||||||
|
|
|
@ -8,6 +8,7 @@ from flask_wtf import FlaskForm
|
||||||
from flask_user.forms import RegisterForm
|
from flask_user.forms import RegisterForm
|
||||||
from wtforms import *
|
from wtforms import *
|
||||||
from wtforms.validators import *
|
from wtforms.validators import *
|
||||||
|
from .utils import rank_required
|
||||||
|
|
||||||
class MyRegisterForm(RegisterForm):
|
class MyRegisterForm(RegisterForm):
|
||||||
display_name = StringField("Display name")
|
display_name = StringField("Display name")
|
||||||
|
@ -19,6 +20,7 @@ class UserProfileForm(FlaskForm):
|
||||||
submit = SubmitField("Save")
|
submit = SubmitField("Save")
|
||||||
|
|
||||||
@app.route("/users/", methods=["GET"])
|
@app.route("/users/", methods=["GET"])
|
||||||
|
@rank_required(UserRank.MODERATOR)
|
||||||
def user_list_page():
|
def user_list_page():
|
||||||
users = User.query.all()
|
users = User.query.all()
|
||||||
return render_template("users/list.html", users=users)
|
return render_template("users/list.html", users=users)
|
||||||
|
|
Loading…
Reference in New Issue