From ee9acf34277d24a0bd740e2568198cfeb9e64ed2 Mon Sep 17 00:00:00 2001 From: Yohan Boniface Date: Fri, 8 Sep 2023 15:22:08 +0200 Subject: [PATCH] Fix map check in DataLayerUpdate view --- umap/views.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/umap/views.py b/umap/views.py index a21f58e1..05cf9d5f 100644 --- a/umap/views.py +++ b/umap/views.py @@ -914,7 +914,7 @@ class DataLayerUpdate(FormLessEditMixin, GZipMixin, UpdateView): def post(self, request, *args, **kwargs): self.object = self.get_object() - if self.object.map != self.kwargs["map_inst"]: + if self.object.map.pk != int(self.kwargs["map_id"]): return HttpResponseForbidden() if not self.object.can_edit(user=self.request.user, request=self.request): return HttpResponseForbidden()