From 4b18be97e66f341a403df3b8c3e5788a4933363a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jos=C3=A9=20Antonio=20de=20la=20Torre?=
 <jose.torre.heras@gmail.com>
Date: Fri, 18 Oct 2019 08:06:42 +0200
Subject: [PATCH] Fixed public project creation flag in API creation #246

---
 ihatemoney/api.py | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ihatemoney/api.py b/ihatemoney/api.py
index dc2f598c..bb2ac9ba 100644
--- a/ihatemoney/api.py
+++ b/ihatemoney/api.py
@@ -1,5 +1,5 @@
 # coding: utf8
-from flask import Blueprint, request
+from flask import Blueprint, request, current_app
 from flask_restful import Resource, Api, abort
 from flask_cors import CORS
 from wtforms.fields.core import BooleanField
@@ -55,7 +55,7 @@ def need_auth(f):
 class ProjectsHandler(Resource):
     def post(self):
         form = ProjectForm(meta={"csrf": False})
-        if form.validate():
+        if form.validate() and current_app.config.get("ALLOW_PUBLIC_PROJECT_CREATION"):
             project = form.save()
             db.session.add(project)
             db.session.commit()
@@ -76,7 +76,7 @@ class ProjectHandler(Resource):
 
     def put(self, project):
         form = EditProjectForm(meta={"csrf": False})
-        if form.validate():
+        if form.validate() and current_app.config.get("ALLOW_PUBLIC_PROJECT_CREATION"):
             form.update(project)
             db.session.commit()
             return "UPDATED"