respect permissions in routing api
This commit is contained in:
parent
b5f8cc3afd
commit
d4f6906a62
1 changed files with 4 additions and 1 deletions
|
@ -2,6 +2,7 @@ from rest_framework.decorators import list_route
|
||||||
from rest_framework.response import Response
|
from rest_framework.response import Response
|
||||||
from rest_framework.viewsets import ViewSet
|
from rest_framework.viewsets import ViewSet
|
||||||
|
|
||||||
|
from c3nav.mapdata.models.access import AccessPermission
|
||||||
from c3nav.mapdata.utils.locations import visible_locations_for_request
|
from c3nav.mapdata.utils.locations import visible_locations_for_request
|
||||||
from c3nav.routing.forms import RouteForm
|
from c3nav.routing.forms import RouteForm
|
||||||
from c3nav.routing.router import Router
|
from c3nav.routing.router import Router
|
||||||
|
@ -18,6 +19,8 @@ class RoutingViewSet(ViewSet):
|
||||||
'errors': form.errors,
|
'errors': form.errors,
|
||||||
})
|
})
|
||||||
|
|
||||||
route = Router.load().get_route(form.cleaned_data['origin'], form.cleaned_data['destination'])
|
route = Router.load().get_route(origin=form.cleaned_data['origin'],
|
||||||
|
destination=form.cleaned_data['destination'],
|
||||||
|
permissions=AccessPermission.get_for_request(request))
|
||||||
|
|
||||||
return Response(route.serialize(locations=visible_locations_for_request(request)))
|
return Response(route.serialize(locations=visible_locations_for_request(request)))
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue