don't allow blocked users to vote

2018-06-22 17:33:04 -05:00
parent 9965111371
commit 422427afea
1 changed files with 6 additions and 0 deletions
@@ -161,6 +161,12 @@ func (s *Rest) voteCtrl(w http.ResponseWriter, r *http.Request) {

 	vote := r.URL.Query().Get("vote") == "1"

+	// check if user blocked
+	if s.adminService.checkBlocked(locator.SiteID, user) {
+		rest.SendErrorJSON(w, r, http.StatusForbidden, errors.New("rejected"), "user blocked")
+		return
+	}
+
 	comment, err := s.DataService.Vote(locator, id, user.ID, vote)
 	if err != nil {
 		rest.SendErrorJSON(w, r, http.StatusBadRequest, err, "can't vote for comment")