Changed deprecated query.get and query.get_or_404 methods to other equivalents

This commit is contained in:
Marcin-Ramotowski
2025-03-29 21:12:00 +00:00
parent 8637eaa96f
commit 2632bdf994
2 changed files with 8 additions and 4 deletions

View File

@ -6,7 +6,7 @@ from werkzeug.security import generate_password_hash
def admin_required(user_id, message='Access denied.'):
user = User.query.get(user_id)
user = db.session.get(User, user_id)
if user is None or user.role != "Administrator":
abort(403, message)
@ -14,7 +14,7 @@ def admin_required(user_id, message='Access denied.'):
def validate_access(owner_id, message='Access denied.'):
# Check if user try to access or edit resource that does not belong to them
logged_user_id = int(get_jwt_identity())
logged_user_role = User.query.get(logged_user_id).role
logged_user_role = db.session.get(User, logged_user_id).role
if logged_user_role != "Administrator" and logged_user_id != owner_id:
abort(403, message)