Can not access current_user inside can_edit, can_view, etc about flask-admin HOT 3 CLOSED

It might work for some properties, but rest of the properties are cached in https://github.com/mrjoes/flask-admin/blob/master/flask_admin/model/base.py#L261

As for your problem - it is iterating through properties to figure out if attribute was exposed as mass-action handler. @action decorator just marks given property with _action attribute.

Only solution that I see right now is to wrap this logic into metaclass and avoid iterating through properties on class creation. Or use some other method to mark attribute with a flag.

from flask-admin.

I originally assumed they were cached on init, but then saw the filter iteration of properties. It doesn't look like the can_* properties are cached (yet), and I think it's a decent use can to be able to override them and check the current_user. I know you can permit/deny across the entire ModelView with is_accessible(), but with role-based access, it's helpful to allow more granularity (ability to view but not edit, etc)

from flask-admin.

The fix worked. Thanks.

from flask-admin.