views.py 文件源码

def can_modify_group(request, gid, raise_exc=True):
    user = request.user
    if user.admin:
        return True
    group_user = request.db_session.query(LedGroupUser).filter(and_(
        LedGroupUser.led_group_id == gid,
        LedGroupUser.led_user == user)).first()
    if group_user is None or group_user.access_level != 2:
        if raise_exc:
            raise exc.HTTPForbidden("You can't modify this group")
        return False
    return True