From 0667227fc7ac593682769a9297587df39cc7a677 Mon Sep 17 00:00:00 2001
From: Sander Roosendaal <sanderroosendaal@proton.me>
Date: Tue, 30 Apr 2024 07:10:24 +0200
Subject: [PATCH 1/2] fix

---
 rowers/views/apiviews.py | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/rowers/views/apiviews.py b/rowers/views/apiviews.py
index 43f8d257..9ee2464b 100644
--- a/rowers/views/apiviews.py
+++ b/rowers/views/apiviews.py
@@ -36,6 +36,7 @@ class XMLParser(BaseParser):
 
 
 @login_required()
+@permission_required('rower.is_not_freecoach', fn=get_user_by_userid, raise_exception=True)
 def strokedataform(request, id=0):
 
     id = encoder.decode_hex(id)
@@ -199,6 +200,7 @@ def api_get_dataframe(startdatetime, df):
     
 
 @login_required()
+@permission_required('rower.is_not_freecoach', fn=get_user_by_userid, raise_exception=True)
 def strokedataform_v2(request, id=0):
 
     id = encoder.decode_hex(id)
@@ -378,6 +380,7 @@ def get_crewnerd_liked(request):
 @csrf_exempt
 @login_required()
 @api_view(["POST"])
+@permission_required('rower.is_not_freecoach', fn=get_user_by_userid, raise_exception=True)
 @permission_classes([IsAuthenticated])
 @parser_classes([XMLParser])
 def strokedata_tcx(request):
@@ -480,6 +483,7 @@ def strokedata_tcx(request):
 @csrf_exempt
 @login_required()
 @api_view(["POST"])
+@permission_required('rower.is_not_freecoach', fn=get_user_by_userid, raise_exception=True)
 @permission_classes([IsAuthenticated])
 def strokedatajson_v3(request):
     """
@@ -618,6 +622,7 @@ def strokedatajson_v3(request):
 # Return the GET stroke data according to the API definition
 @csrf_exempt
 @login_required()
+@permission_required('rower.is_not_freecoach', fn=get_user_by_userid, raise_exception=True)
 @api_view(["GET", "POST"])
 @permission_classes([IsAuthenticated])
 def strokedatajson_v2(request, id):
@@ -776,6 +781,7 @@ def strokedatajson_v2(request, id):
 
 @csrf_exempt
 @login_required()
+@permission_required('rower.is_not_freecoach', fn=get_user_by_userid, raise_exception=True)
 @api_view(['GET', 'POST'])
 @permission_classes([IsAuthenticated])
 def strokedatajson(request, id=0):

From f05392b7464f2dc93a8ba33a21c3a765aa050fc3 Mon Sep 17 00:00:00 2001
From: Sander Roosendaal <sanderroosendaal@proton.me>
Date: Tue, 30 Apr 2024 07:34:24 +0200
Subject: [PATCH 2/2] tested improvement

---
 rowers/tests/testdata/testdata.tcx.gz | Bin 3998 -> 4000 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/rowers/tests/testdata/testdata.tcx.gz b/rowers/tests/testdata/testdata.tcx.gz
index 185420d18a66351871dfc52784f7f07a245dfa23..1148cc31f5aa3a20b5e8215151ac42ff5c38227d 100644
GIT binary patch
delta 258
zcmV+d0sa1-AD|xxABzYGwtX<M2dNH!zVo)@?&t`<JMMotSnLkCvpdtr-<UsNep>Cm
zKX`bNIG$a6*!NkN-kyuIx0`PLvO781KCSd|wLX5?^<6q|w|l!1l~2bVJb2x|I=i^?
znmjl^KUp1hefsH_FUIA$zdBj^?x)wQlb4r2_qX&urbDkhoDW-`cK=D2%+7*wtDnE#
zZM9CDy?oklyW#TDesTVT7wM)Ce_fs|yUj9j$e%tux-0i}@T6NGKYn!h^Rvum`{!=^
zFX=6Q_WJaXWx6wfdjPxt4;ELx*gg5}V>-OEMZH?5=kPG0TwXj%Pveht>BBq!13<vQ
Ilf-}l0FtDQfB*mh

delta 256
zcmV+b0ssD>AD$lvABzYG*}o&P2dNH!0oaih^6=ep|HHvzcfg(9nLhr;{Q2_JYWMxY
z!;8f6?Bc_|&${&XT%5h#bnBPh$;tL<rH`xi@yo97(s{ex+m)z%I_}`X>;Bc*#g*6O
z!TI^g>Zt3}PrrOIF3<hd$<lW}y<VNXy!^SprS~x%dgbAK*z&adPr77w7F_*r{Pk|D
zb=vIZ(|+3xmyh;~^B=rOH+}f)@?_a<mWf0D^x@H6xvzsK-TL_Pqr;z{Wj5PCciVqS
zZ}GF&r++NdodMhf*!_R7xbnsB$!{Oi;hin&)jB<ghY98K;!%1Uf22zv-uWNk?Ces+
GfB^uFk)wG4