Change how the user avatar is exchanged between client und server

This commit is contained in:
Patrick Jentsch
2023-03-16 09:54:48 +01:00
parent 7ea7b6d7a7
commit f8e94a721f
3 changed files with 4 additions and 7 deletions

View File

@ -64,10 +64,10 @@ def user(user_id):
@login_required
def profile_avatar(user_id):
user = User.query.get_or_404(user_id)
if not (user.is_public or user == current_user or current_user.is_administrator()):
abort(403)
if user.avatar is None:
return redirect(url_for('static', filename='images/user_avatar.png'))
if not user.is_public and not (user == current_user or current_user.is_administrator()):
abort(403)
return send_from_directory(
os.path.dirname(user.avatar.path),
os.path.basename(user.avatar.path),