diff --git a/public/js/client_rmld.js b/public/js/client_rmld.js
index a7ea0a5..29f9d79 100755
--- a/public/js/client_rmld.js
+++ b/public/js/client_rmld.js
@@ -29,11 +29,14 @@ var marker = L.marker(new L.LatLng(0, 0), {
   icon: redIcon
 }).addTo(map);
 
+console.log(einsatzdaten_obj.wgs84_area);
+
 // Karte setzen
 map.removeLayer(marker);
 marker = L.marker(new L.LatLng(einsatzdaten_obj.wgs84_x, einsatzdaten_obj.wgs84_y), {
   icon: redIcon
 }).addTo(map);
+L.geoJSON(einsatzdaten_obj.wgs84_area).addTo(map);
 map.setView(new L.LatLng(einsatzdaten_obj.wgs84_x, einsatzdaten_obj.wgs84_y), 13);
 
 
diff --git a/server/routing.js b/server/routing.js
index bd102d8..537a446 100755
--- a/server/routing.js
+++ b/server/routing.js
@@ -171,13 +171,13 @@ module.exports = function(app, sql, uuidv4, app_cfg, passport, auth, waip, udp)
     sql.db_get_einsatzdaten_by_uuid(waip_uuid, function(einsatzdaten) {
       if (einsatzdaten) {        
         sql.db_check_permission(req.user, einsatzdaten.id, function(valid) {
-          /*if (!valid) {
+          if (!valid) {
             delete einsatzdaten.objekt;
             delete einsatzdaten.besonderheiten;
             delete einsatzdaten.strasse;
             delete einsatzdaten.wgs84_x;
   			    delete einsatzdaten.wgs84_y;
-          };*/
+          };
           res.render('rmld', {
             public: app_cfg.public,
             title: 'Einsatz-Rückmeldung',