diff options
| author | José Antonio de la Torre <jose.torre.heras@gmail.com> | 2019-10-18 08:06:42 +0200 |
|---|---|---|
| committer | Alexis Metaireau <alexis@notmyidea.org> | 2019-10-19 12:30:31 +0200 |
| commit | 4b18be97e66f341a403df3b8c3e5788a4933363a (patch) | |
| tree | 1a79248d2dda581752a3f969beba595d08901985 /ihatemoney/api.py | |
| parent | 5158135ac6c134c0d62be14daa92fc19e7db88b3 (diff) | |
| download | ihatemoney-mirror-4b18be97e66f341a403df3b8c3e5788a4933363a.zip ihatemoney-mirror-4b18be97e66f341a403df3b8c3e5788a4933363a.tar.gz ihatemoney-mirror-4b18be97e66f341a403df3b8c3e5788a4933363a.tar.bz2 | |
Fixed public project creation flag in API creation #246
Diffstat (limited to 'ihatemoney/api.py')
| -rw-r--r-- | ihatemoney/api.py | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/ihatemoney/api.py b/ihatemoney/api.py index dc2f598..bb2ac9b 100644 --- a/ihatemoney/api.py +++ b/ihatemoney/api.py @@ -1,5 +1,5 @@ # coding: utf8 -from flask import Blueprint, request +from flask import Blueprint, request, current_app from flask_restful import Resource, Api, abort from flask_cors import CORS from wtforms.fields.core import BooleanField @@ -55,7 +55,7 @@ def need_auth(f): class ProjectsHandler(Resource): def post(self): form = ProjectForm(meta={"csrf": False}) - if form.validate(): + if form.validate() and current_app.config.get("ALLOW_PUBLIC_PROJECT_CREATION"): project = form.save() db.session.add(project) db.session.commit() @@ -76,7 +76,7 @@ class ProjectHandler(Resource): def put(self, project): form = EditProjectForm(meta={"csrf": False}) - if form.validate(): + if form.validate() and current_app.config.get("ALLOW_PUBLIC_PROJECT_CREATION"): form.update(project) db.session.commit() return "UPDATED" |