diff options
| author | rubenwardy <rw@rubenwardy.com> | 2020-07-09 05:47:26 +0100 |
|---|---|---|
| committer | rubenwardy <rw@rubenwardy.com> | 2020-07-09 05:47:26 +0100 |
| commit | 078765fe44de4b923f008595eafc8d16cb8c99f1 (patch) | |
| tree | a7802d6b1dbaf8129ba50cf8c9cbb73f8939ce47 | |
| parent | 45877bb3a42ac37d6c165997a22ab3bb47c2de11 (diff) | |
| download | cheatdb-078765fe44de4b923f008595eafc8d16cb8c99f1.tar.xz | |
Prevent users from reviewing their own packages
| -rw-r--r-- | app/blueprints/packages/reviews.py | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/app/blueprints/packages/reviews.py b/app/blueprints/packages/reviews.py index 74070fc..a7a1127 100644 --- a/app/blueprints/packages/reviews.py +++ b/app/blueprints/packages/reviews.py @@ -34,6 +34,10 @@ class ReviewForm(FlaskForm): @login_required @is_package_page def review(package): + if current_user in package.maintainers: + flash("You can't review your own package!", "danger") + return redirect(package.getDetailsURL()) + review = PackageReview.query.filter_by(package=package, author=current_user).first() form = ReviewForm(formdata=request.form, obj=review) |