28 lines
806 B
Python
28 lines
806 B
Python
from functools import wraps
|
|
from flask import abort, request, jsonify, session
|
|
from flask_login import login_required
|
|
from applications.common.admin_log import admin_log
|
|
|
|
|
|
def authorize(power: str, log: bool = False):
|
|
def decorator(func):
|
|
@login_required
|
|
@wraps(func)
|
|
def wrapper(*args, **kwargs):
|
|
if power not in session.get('permissions'):
|
|
if log:
|
|
admin_log(request=request, is_access=False)
|
|
if request.method == 'GET':
|
|
abort(403)
|
|
else:
|
|
return jsonify(success=False, msg="权限不足!")
|
|
if log:
|
|
admin_log(request=request, is_access=True)
|
|
return func(*args, **kwargs)
|
|
|
|
return wrapper
|
|
|
|
return decorator
|
|
|
|
|