stable

Author: giladfuchs

fastapi-postgres/common/db_model/__init__.py

@@ -86,7 +86,8 @@ async def add_or_find_update(
 
         if add_or_id != "add" and not isinstance(body, list):
             db_obj = await cls.get_by_id(_id=add_or_id, **kwargs)
-            if db_obj and (not user_auth or user_auth.id == db_obj.teacher_id):
+
+            if db_obj and (not user_auth or user_auth.id == getattr(db_obj, conf.AUTH_PARENT_FIELD)):
                 set_elements_by_dict(db_obj, body, exclude_items=["id"], **kwargs)
             else:
                 ErrorService.error_400(details="not found")
@@ -99,8 +100,8 @@ async def add_or_find_update(
             db_obj = cls.table()
             set_elements_by_dict(db_obj, body, **kwargs)
 
-            if user_auth:
-                setattr(db_obj, "teacher_id", user_auth.id)
+            if user_auth and hasattr(db_obj, conf.AUTH_PARENT_FIELD):
+                setattr(db_obj, conf.AUTH_PARENT_FIELD, user_auth.id)
 
         await cls.add_update(row=db_obj, **kwargs)
         return db_obj

fastapi-postgres/service/auth.py

@@ -16,7 +16,7 @@ async def jwt_required(token: str = Depends(oauth2_scheme)) -> str:
     return user
 
 
-def user_filtered_query(field_name: str = "teacher_id"):
+def user_filtered_query(field_name: str = conf.AUTH_PARENT_FIELD):
     def _inject_user_filter(
         filter_query: FilterQuery = Body(default=FilterQuery()),
         user_auth: TeacherModel.table = Depends(jwt_required),