diff --git a/backend/app/rest/api/rest_private.go b/backend/app/rest/api/rest_private.go index 25d067be..0a2de0ec 100644 --- a/backend/app/rest/api/rest_private.go +++ b/backend/app/rest/api/rest_private.go @@ -149,6 +149,12 @@ func (s *Rest) voteCtrl(w http.ResponseWriter, r *http.Request) { vote := r.URL.Query().Get("vote") == "1" + if s.ReadOnlyAge > 0 { + if info, e := s.DataService.Info(locator, s.ReadOnlyAge); e == nil && info.ReadOnly { + rest.SendErrorJSON(w, r, http.StatusForbidden, errors.New("rejected"), "old post, read-only") + return + } + } // check if user blocked if s.adminService.checkBlocked(locator.SiteID, user) { rest.SendErrorJSON(w, r, http.StatusForbidden, errors.New("rejected"), "user blocked")