From d4f6906a6284b45375e0acaaf3f2d96a034d53c7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Laura=20Kl=C3=BCnder?= Date: Tue, 28 Nov 2017 00:41:34 +0100 Subject: [PATCH] respect permissions in routing api --- src/c3nav/routing/api.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/src/c3nav/routing/api.py b/src/c3nav/routing/api.py index 82f61a26..b370daaf 100644 --- a/src/c3nav/routing/api.py +++ b/src/c3nav/routing/api.py @@ -2,6 +2,7 @@ from rest_framework.decorators import list_route from rest_framework.response import Response from rest_framework.viewsets import ViewSet +from c3nav.mapdata.models.access import AccessPermission from c3nav.mapdata.utils.locations import visible_locations_for_request from c3nav.routing.forms import RouteForm from c3nav.routing.router import Router @@ -18,6 +19,8 @@ class RoutingViewSet(ViewSet): 'errors': form.errors, }) - route = Router.load().get_route(form.cleaned_data['origin'], form.cleaned_data['destination']) + route = Router.load().get_route(origin=form.cleaned_data['origin'], + destination=form.cleaned_data['destination'], + permissions=AccessPermission.get_for_request(request)) return Response(route.serialize(locations=visible_locations_for_request(request)))