um-cseg / chez-betty

        return HTTPFound(location=request.route_url('user_pools'))

@view_config(route_name='user_pool',

             renderer='templates/user/pool.jinja2',

             permission='user')

def user_pool(request):

    try:

        pool = Pool.from_id(request.matchdict['pool_id'])

        if pool.owner != request.user.id:

            request.session.flash('You do not have permission to view that pool.', 'error')

            return HTTPFound(location=request.route_url('user_pools'))

        r = transaction_history_queries(request, pool)

        r['user'] = request.user

        r['pool'] = pool

        return r

    except Exception as e:

        if request.debug: raise(e)

        request.session.flash('Could not load pool.', 'error')

        return HTTPFound(location=request.route_url('user_pools'))

@view_config(route_name='user_pool_addmember_submit',

    return {}

@view_config(route_name='user_password_edit_submit',

             request_method='POST',

             permission='user')

def user_password_edit_submit(request):

    pwd0 = request.POST['edit-password-0']

    pwd1 = request.POST['edit-password-1']

    if pwd0 != pwd1:

        request.session.flash('Error: Passwords do not match', 'error')

        return HTTPFound(location=request.route_url('user_password_edit'))

    request.user.password = pwd0

    request.session.flash('Password changed successfully.', 'success')

    return HTTPFound(location=request.route_url('user_index'))

    # check that changing password for actually logged in user