1 files changed, 39 insertions, 0 deletions
diff --git a/budget/utils.py b/budget/utils.py
new file mode 100644
index 0000000..f3f0458
--- /dev/null
+++ b/budget/utils.py
@@ -0,0 +1,39 @@
+from functools import wraps
+from flask import redirect, url_for, session, request
+
+from models import Bill, Project
+from forms import BillForm
+
+def get_billform_for(project_id):
+    """Return an instance of BillForm configured for a particular project."""
+    form = BillForm()
+    payers = [(m.id, m.name) for m in Project.query.get("blah").members]
+    form.payed_for.choices = form.payer.choices = payers
+    return form
+
+def requires_auth(f):
+    """Decorator checking that the user do have access to the given project id.
+
+    If not, redirects to an authentication page, otherwise display the requested
+    page.
+    """
+
+    @wraps(f)
+    def decorator(*args, **kwargs):
+        # if a project id is specified in kwargs, check we have access to it
+        # get the password matching this project id
+        # pop project_id out of the kwargs
+        project_id = kwargs.pop('project_id')
+        project = Project.query.get(project_id)
+        if not project:
+            return redirect(url_for("create_project", project_id=project_id))
+
+        if project.id in session and session[project.id] == project.password:
+            # add project into kwargs and call the original function
+            kwargs['project'] = project
+            return f(*args, **kwargs)
+        else:
+            # redirect to authentication page
+            return redirect(url_for("authenticate",
+                project_id=project.id, redirect_url=request.url))
+    return decorator