rafaelcaricio/moviewyrm
1
0
Fork 0
forked from mirrors/bookwyrm
Code Issues 4 Pull requests Projects Releases Wiki Activity

pylint

Browse source
This commit is contained in:
Joachim 2021-12-22 17:09:12 +01:00
parent d4b8aa51f6
commit 04d51cde3f
1 changed files with 16 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

28
bookwyrm/views/annual_summary.py
View file

@ -33,17 +33,7 @@ class AnnualSummary(View):
if user.summary_keys and year in user.summary_keys: if user.summary_keys and year in user.summary_keys:
year_key = user.summary_keys[year] year_key = user.summary_keys[year]
# verify key privacy_verification(request, user, year, year_key)
if user != request.user:
request_key = None
if "key" in request.GET:
request_key = request.GET["key"]
if not request_key or request_key != year_key:
raise Http404(f"The summary for {year} is unavailable")
if not is_year_available(user, year):
raise Http404(f"The summary for {year} is unavailable")
paginated_years = ( paginated_years = (
int(year) - 1 if is_year_available(user, int(year) - 1) else None, int(year) - 1 if is_year_available(user, int(year) - 1) else None,
@ -171,13 +161,27 @@ def get_annual_summary_year():
return None return None
def privacy_verification(request, user, year, year_key):
if user != request.user:
request_key = None
if "key" in request.GET:
request_key = request.GET["key"]
if not request_key or request_key != year_key:
raise Http404(f"The summary for {year} is unavailable")
if not is_year_available(user, year):
raise Http404(f"The summary for {year} is unavailable")
def is_year_available(user, year): def is_year_available(user, year):
"""return boolean""" """return boolean"""
earliest_year = get_earliest_year(user) earliest_year = get_earliest_year(user)
today = date.today() today = date.today()
year = int(year) year = int(year)
if year < today.year and year >= earliest_year: if earliest_year <= year < today.year:
return True return True
if year == today.year and today >= date(today.year, 12, FIRST_DAY): if year == today.year and today >= date(today.year, 12, FIRST_DAY):
return True return True