mirror of
https://github.com/pds-nest/nest.git
synced 2024-11-26 23:14:19 +00:00
29 lines
1.1 KiB
Python
29 lines
1.1 KiB
Python
|
from flask import render_template, abort, jsonify, request
|
||
|
|
from ...database import *
|
||
|
|
from flask_jwt_extended import jwt_required
|
||
|
|
from ...gestione import *
|
||
|
|
from flask_cors import cross_origin
|
||
|
|
|
||
|
|
|
||
|
|
@cross_origin()
|
||
|
|
@jwt_required()
|
||
|
|
def page_user_delete():
|
||
|
|
"""
|
||
|
|
API call that allows an user to be deleted from NEST.
|
||
|
|
:parameter email: The email of the user that needs to be removed.
|
||
|
|
:return: JSON-formatted data. If the user has the privilege, the target user exists and differs from the current
|
||
|
|
user, the target gets deleted and a json containing the field "result":"success" is returned.
|
||
|
|
"""
|
||
|
|
user = find_user(get_jwt_identity())
|
||
|
|
if not user.isAdmin:
|
||
|
|
return json_error("User is not admin."), 403
|
||
|
|
deluser=request.json.get('email')
|
||
|
|
target = find_user(deluser)
|
||
|
|
if not target:
|
||
|
|
return json_error("User not found."), 404
|
||
|
|
if user == target:
|
||
|
|
return json_error("The user cant delete himself. Its a sin."), 406
|
||
|
|
Base.session.delete(target)
|
||
|
|
Base.session.commit()
|
||
|
|
return json_success("The user has been deleted.")
|