Add endpoints for editing and deleting dish reviews

canteeneo/api.py

@@ -131,6 +131,28 @@ def create_dish_review(dish_id):
     db.session.commit()
     return jsonify(review_obj(review))
 
+@app.route('/api/dishes/<int:dish_id>/reviews/<int:dish_review_id>', methods=['PUT'])
+@auth.login_required
+def edit_dish_review(dish_id, dish_review_id):
+    review = DishReview.query.get(dish_review_id)
+    if review is None or g.user.id != review.user_id:
+        return abort(401)
+    review.title = request.json['title']
+    review.body = request.json['body']
+    review.rating = int(request.json['rating'])
+    db.session.commit()
+    return jsonify(review_obj(review))
+
+@app.route('/api/dishes/<int:dish_id>/reviews/<int:dish_review_id>', methos=['DELETE'])
+@auth.login_required
+def delete_dish_reviwe(dish_id, dish_review_id):
+    review = DishReview.query.get(dish_review_id)
+    if review is None or g.user.id != review.user_id:
+        return abort(401)
+    db.session.delete(review)
+    db.session.commit()
+    return 200
+
 @app.route('/api/dishes/<int:dish_id>/reviews', methods=['GET'])
 def dish_reviews(dish_id):
     dish = Dish.query.get(dish_id)