From 8beb8c3ccf90f66b6770e94ec276791e4c4366a7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jos=C3=A9=20Antonio=20de=20la=20Torre?=
 <jose.torre.heras@gmail.com>
Date: Fri, 18 Oct 2019 08:06:42 +0200
Subject: [PATCH] Fixed public project creation flag in API creation #246

---
 ihatemoney/api.py | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ihatemoney/api.py b/ihatemoney/api.py
index c9c5376b..dfd78bf6 100644
--- a/ihatemoney/api.py
+++ b/ihatemoney/api.py
@@ -1,5 +1,5 @@
 # -*- coding: utf-8 -*-
-from flask import Blueprint, request
+from flask import Blueprint, request, current_app
 from flask_restful import Resource, Api, abort
 from flask_cors import CORS
 from wtforms.fields.core import BooleanField
@@ -39,7 +39,7 @@ def need_auth(f):
 class ProjectsHandler(Resource):
     def post(self):
         form = ProjectForm(meta={'csrf': False})
-        if form.validate():
+        if form.validate() and current_app.config.get("ALLOW_PUBLIC_PROJECT_CREATION"):
             project = form.save()
             db.session.add(project)
             db.session.commit()
@@ -60,7 +60,7 @@ class ProjectHandler(Resource):
 
     def put(self, project):
         form = EditProjectForm(meta={'csrf': False})
-        if form.validate():
+        if form.validate() and current_app.config.get("ALLOW_PUBLIC_PROJECT_CREATION"):
             form.update(project)
             db.session.commit()
             return "UPDATED"