Function admin_validator

src/octoprint/server/util.py:406–423

Validates that the given request is made by an admin user, identified either by API key or existing Flask session. Must be executed in an existing Flask request context! :param request: The Flask request object

(request)

def admin_validator(request):
	"""
	Validates that the given request is made by an admin user, identified either by API key or existing Flask
	session.

	Must be executed in an existing Flask request context!

	:param request: The Flask request object
	"""

	apikey = getApiKey(request)
	if settings().get(["api", "enabled"]) and apikey is not None:
		user = getUserForApiKey(apikey)
	else:
		user = current_user

	if user is None or not user.is_authenticated or not user.is_admin():
		raise HTTPError(403)


#~~ user access validator for use with tornado