Fix some probles with the web API

taiga/base/routers.py

@@ -295,13 +295,6 @@ class DRFDefaultRouter(SimpleRouter):
 
 
 class DefaultRouter(DRFDefaultRouter):
-    routes = [
+    pass
-        Route(
-            url=r'^{prefix}/(?P<pk>\d+)/restore/(?P<vpk>\d+)$',
-            mapping={'post': 'restore'},
-            name='{basename}-restore',
-            initkwargs={}
-        )
-    ] + DRFDefaultRouter.routes
 
 __all__ = ["DefaultRouter"]

taiga/projects/api.py

@@ -148,7 +148,7 @@ class MembershipViewSet(ModelCrudViewSet):
         email.send()
 
 
-class InvitationViewSet(RetrieveModelMixin, viewsets.GenericViewSet):
+class InvitationViewSet(RetrieveModelMixin, viewsets.ReadOnlyModelViewSet):
     """
     Only used by front for get invitation by it token.
     """
@@ -157,6 +157,9 @@ class InvitationViewSet(RetrieveModelMixin, viewsets.GenericViewSet):
     lookup_field = "token"
     permission_classes = (AllowAny,)
 
+    def list(self, *args, **kwargs):
+        raise exc.PermissionDenied(_("You don't have permisions to see that."))
+
 
 class RolesViewSet(ModelCrudViewSet):
     model = Role