diff --git a/rog/views.py b/rog/views.py
index 51d709b..0ed002a 100644
--- a/rog/views.py
+++ b/rog/views.py
@@ -205,9 +205,13 @@ def ExtentForMainPerf(request):
     # iata = serializers.serialize("json",ext)
     return JsonResponse(ext, safe=False)
 
-
+@api_view(['POST',])
+@permission_classes((IsAuthenticated,))
+@csrf_exempt 
 def ExtentForLocations(request):
-    locs = Location.objects.aggregate(Extent('geom'), Union('geom'))
+    user = request.user
+    print(user.email)
+    locs = Location.objects.filter(group__contains=user.group).aggregate(Extent('geom'), Union('geom'))
     return JsonResponse(locs['geom__extent'], safe=False)