aboutsummaryrefslogtreecommitdiffstats
path: root/access/remove.py
blob: 7e6986b5994f4c12f7d3fd538375c6686249247f (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
#!/usr/bin/env python
# -*- coding: UTF-8 -*-

import webapp2

from google.appengine.api import users
from google.appengine.ext import db

class RemoveEvent(webapp2.RequestHandler):
    def get(self):
        return
    def post(self):
        guserid = users.get_current_user()
        if not guserid:
            return
        thiskey = db.Key(self.request.get('key'))
        if thiskey.parent().name() != guserid.email():
            self.response.set_status(403)
            return
        thisobj = db.get(thiskey)
        thisobj.delete()

app = webapp2.WSGIApplication([('/access/remove', RemoveEvent)])