Merge pull request #135 from codersforcauses/issue-131-Upcoming_events_list_would_leak_unpublished_events

Filter unpublished events in EventListAPIView

Author: laurenpudz

server/game_dev/views.py

@@ -37,6 +37,9 @@ def get_queryset(self):
         qs = Event.objects.all()
         type_param = self.request.query_params.get("type")
         now = timezone.now()
+        nowdate = now.date()
+        # Only show published events
+        qs = qs.filter(publicationDate__lte=nowdate)
 
         # Default to upcoming when type is missing/empty
         if not type_param: