@@ -69,7 +69,9 @@ def _get_one(self,key):
6969params_role = "UNKNOWN"
7070if params_role not in roles :
7171return json ({"code" :400 ,"msg" :"'%s' not accessible by role '%s'" % (modelname ,params_role )})
72- if functions .has_role (request .user ,params_role ):
72+ if params_role == "UNKNOWN" :
73+ permission_check_ok = True
74+ elif functions .has_role (request .user ,params_role ):
7375permission_check_ok = True
7476else :
7577return json ({"code" :400 ,"msg" :"user doesn't have role '%s'" % (params_role )})
@@ -178,7 +180,9 @@ def _get_array(self,key):
178180params_role = "UNKNOWN"
179181if params_role not in roles :
180182return json ({"code" :400 ,"msg" :"'%s' not accessible by role '%s'" % (modelname ,params_role )})
181- if functions .has_role (request .user ,params_role ):
183+ if params_role == "UNKNOWN" :
184+ permission_check_ok = True
185+ elif functions .has_role (request .user ,params_role ):
182186permission_check_ok = True
183187else :
184188return json ({"code" :400 ,"msg" :"user doesn't have role '%s'" % (params_role )})
@@ -273,7 +277,9 @@ def _head(self,key):
273277params_role = "UNKNOWN"
274278if params_role not in roles :
275279return json ({"code" :400 ,"msg" :"'%s' not accessible by role '%s'" % (modelname ,params_role )})
276- if functions .has_role (request .user ,params_role ):
280+ if params_role == "UNKNOWN" :
281+ permission_check_ok = True
282+ elif functions .has_role (request .user ,params_role ):
277283permission_check_ok = True
278284else :
279285return json ({"code" :400 ,"msg" :"user doesn't have role '%s'" % (params_role )})
@@ -358,6 +364,9 @@ def _post_one(self,key,tag):
358364#need OWNER, but don't know how to set user id
359365return json ({"code" :400 ,"msg" :"no permission" })
360366break
367+ elif role == "UNKNOWN" :
368+ permission_check_ok = True
369+ break
361370else :
362371if functions .has_role (request .user ,role ):
363372permission_check_ok = True
@@ -466,6 +475,9 @@ def _put_one(self,key,tag):
466475break
467476else :
468477return json ({"code" :400 ,"msg" :"need login user" })
478+ elif role == "UNKNOWN" :
479+ permission_check_ok = True
480+ break
469481else :
470482if functions .has_role (request .user ,role ):
471483permission_check_ok = True
@@ -564,6 +576,9 @@ def _delete_one(self,key,tag):
564576break
565577else :
566578return json ({"code" :400 ,"msg" :"need login user" })
579+ elif role == "UNKNOWN" :
580+ permission_check_ok = True
581+ break
567582else :
568583if functions .has_role (request .user ,role ):
569584permission_check_ok = True