filtered admin posts from search results
This commit is contained in:
@@ -19,15 +19,17 @@ class BlogRecordService(object):
|
|||||||
query = query.filter(BlogRecord.tag != 'admin')
|
query = query.filter(BlogRecord.tag != 'admin')
|
||||||
if tag != '':
|
if tag != '':
|
||||||
query = query.filter(BlogRecord.tag == tag)
|
query = query.filter(BlogRecord.tag == tag)
|
||||||
query = query.order_by(BlogRecord.tag, BlogRecord.title).all()
|
return query.order_by(BlogRecord.tag, BlogRecord.title).all()
|
||||||
return query
|
|
||||||
|
|
||||||
@classmethod
|
@classmethod
|
||||||
def by_criteria(cls, request, criteria):
|
def by_criteria(cls, request, criteria):
|
||||||
search = "%{}%".format(criteria)
|
search = "%{}%".format(criteria)
|
||||||
query = request.dbsession.query(BlogRecord).filter(or_(BlogRecord.title.like(search),
|
query = request.dbsession.query(BlogRecord).filter(or_(BlogRecord.title.like(search),
|
||||||
BlogRecord.body.like(search))).all()
|
BlogRecord.body.like(search)))
|
||||||
return query
|
if request.authenticated_userid != 'admin':
|
||||||
|
# if user is not 'admin', hide admin posts
|
||||||
|
query = query.filter(BlogRecord.tag != 'admin')
|
||||||
|
return query.order_by(BlogRecord.title).all()
|
||||||
|
|
||||||
@classmethod
|
@classmethod
|
||||||
def by_id(cls, request, _id):
|
def by_id(cls, request, _id):
|
||||||
|
|||||||
Reference in New Issue
Block a user