|
@@ -313,6 +313,26 @@ def admin():
|
|
|
return render_template("admin.html", users=users)
|
|
return render_template("admin.html", users=users)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
[email protected]("/tableview")
|
|
|
|
|
+def tableview():
|
|
|
|
|
+ if not session.get("userid"):
|
|
|
|
|
+ return redirect(url_for("login"))
|
|
|
|
|
+
|
|
|
|
|
+ user = db.session.execute(
|
|
|
|
|
+ db.select(User).where(User.id == session.get("userid"))
|
|
|
|
|
+ ).scalar_one_or_none()
|
|
|
|
|
+
|
|
|
|
|
+ if not user or not user.is_admin:
|
|
|
|
|
+ flash("You are not an admin!", category="danger")
|
|
|
|
|
+ return redirect(url_for("home"))
|
|
|
|
|
+
|
|
|
|
|
+ return render_template(
|
|
|
|
|
+ "tableview.html",
|
|
|
|
|
+ tasks=db.session.execute(db.select(Task)).scalars().all(),
|
|
|
|
|
+ users=db.session.execute(db.select(User)).scalars().all(),
|
|
|
|
|
+ )
|
|
|
|
|
+
|
|
|
|
|
+
|
|
|
@app.route("/logout", methods=["POST"])
|
|
@app.route("/logout", methods=["POST"])
|
|
|
def logout():
|
|
def logout():
|
|
|
session.pop("userid", None)
|
|
session.pop("userid", None)
|