diff --git a/SmearcarDB/server.py b/SmearcarDB/server.py index beee817..83c17aa 100644 --- a/SmearcarDB/server.py +++ b/SmearcarDB/server.py @@ -226,11 +226,10 @@ def updates(): def editors(): if request.method == "POST": received = request.get_json() - doer = received['editor'] - if Editor.query.filter_by(username=received[username].count()) == 0 and Editor.query.filter_by(username=doer['username'], password=doer['password']).count() == 1: - user = Editor(authority = received[authority], - username = received[username], - password = received[password]) + if Editor.query.filter_by(username=received['username'].count()) == 0 and check_privelege(received['editor'], 0): + user = Editor(authority = received['authority'], + username = received['username'], + password = received['password']) db.session.add(user) db.session.commit() return user