Merge pull request #35131 from dimagi/em/location-lineage-access

Check can_edit_or_view_location on location_lineage
dimagi · Sep 17, 2024 · 6d13acb · 6d13acb
2 parents 6b4be3f + 9e8705b
commit 6d13acb
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/corehq/apps/locations/views.py b/corehq/apps/locations/views.py
@@ -720,6 +720,7 @@ def delete_location(request, domain, loc_id):
     })
 
 
+@can_edit_or_view_location
 @location_safe
 def location_lineage(request, domain, loc_id):
     lineage = SQLLocation.objects.get_locations([loc_id])[0].lineage