Limit casting of votes to pending edits (#405)

stashapp · May 21, 2022 · 0591392 · 0591392
1 parent c73060d
commit 0591392
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/pkg/api/resolver_mutation_edit.go b/pkg/api/resolver_mutation_edit.go
@@ -13,6 +13,7 @@ import (
 
 var ErrUnauthorizedUpdate = fmt.Errorf("Only the creator can update edits")
 var ErrAlreadyUpdated = fmt.Errorf("Edits can only be updated once")
+var ErrClosedEdit = fmt.Errorf("Votes can only be cast on pending edits")
 
 func (r *mutationResolver) SceneEdit(ctx context.Context, input models.SceneEditInput) (*models.Edit, error) {
 	UUID, err := uuid.NewV4()
@@ -329,6 +330,10 @@ func (r *mutationResolver) EditVote(ctx context.Context, input models.EditVoteIn
 			return err
 		}
 
+		if voteEdit.Status != models.VoteStatusEnumPending.String() {
+			return ErrClosedEdit
+		}
+
 		if err := user.ValidateOwner(ctx, voteEdit.UserID); err == nil {
 			return user.ErrUnauthorized
 		}