2025-summer/team-3
12
Fork 0
Code Issues Pull requests Projects Releases Activity

fixed PUT on /positions/{position_id}/ API endpoint

Browse source
This commit is contained in:
Jenny Danzmayr 2023-12-28 15:27:43 +01:00
parent d45bcfb2fb
commit ff7d9d85fd
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/c3nav/mapdata/api/map.py
View file

@ -291,10 +291,10 @@ class UpdatePositionSchema(BaseSchema):
response={200: AnyPositionStatusSchema, **API404.dict(), **auth_permission_responses})
def set_position(request, position_id: AnyPositionID, update: UpdatePositionSchema):
# todo: may an API key do this?
if not update.position_id.startswith('p:'):
if not isinstance(position_id, str) or not position_id.startswith('p:'):
raise API404()
try:
location = Position.objects.get(secret=update.position_id[2:])
location = Position.objects.get(secret=position_id[2:])
except Position.DoesNotExist:
raise API404()
if location.owner != request.user: