Spitball for combined ingest/overlay auth decorator

flowapi.py (abridged)

from functools import wraps

import flask
import flask_restplus

from disco.collections.common.model.auth_resource import AuthResource
from disco.collections.common.model.tenant.flowtype import FlowType
from disco.collections.webserver.api import auth


def _flow_type_specific_auth(permission):
    def decorator(endpoint):
        @wraps(endpoint)
        def wrapped(self, *args, **kwargs):
            params = flask.request.get_json()
            flow_type = FlowType[params['flowType']]
            resource = AuthResource.OVERLAY if flow_type.is_overlay else AuthResource.INGEST
            return auth.either(permission, resource)(endpoint)(self, *args, **kwargs)
        return wrapped
    return decorator


def install(api, path):

    @api.route(path + '/<string:tenant_id>')
    class FlowCreateResource(flask_restplus.Resource):

        @_flow_type_specific_auth('manage')
        def post(self, tenant_id):