core: check perm for solution voting (#1089)

Lyricus233 · web-flow · commit effc7da31283 · 2025-11-18T04:07:51.000Z
diff --git a/packages/hydrooj/src/handler/problem.ts b/packages/hydrooj/src/handler/problem.ts
@@ -922,12 +922,14 @@ export class ProblemSolutionHandler extends ProblemDetailHandler {
 
     @param('psid', Types.ObjectId)
     async postUpvote(domainId: string, psid: ObjectId) {
+        this.checkPerm(PERM.PERM_VOTE_PROBLEM_SOLUTION);
         const psdoc = await solution.vote(domainId, psid, this.user._id, 1);
         this.back({ vote: psdoc.vote, user_vote: 1 });
     }
 
     @param('psid', Types.ObjectId)
     async postDownvote(domainId: string, psid: ObjectId) {
+        this.checkPerm(PERM.PERM_VOTE_PROBLEM_SOLUTION);
         const psdoc = await solution.vote(domainId, psid, this.user._id, -1);
         this.back({ vote: psdoc.vote, user_vote: -1 });
     }

Original file line number	Diff line number	Diff line change
`@@ -922,12 +922,14 @@ export class ProblemSolutionHandler extends ProblemDetailHandler {`
`922`	`922`
`923`	`923`	`@param('psid', Types.ObjectId)`
`924`	`924`	`async postUpvote(domainId: string, psid: ObjectId) {`
	`925`	`+ this.checkPerm(PERM.PERM_VOTE_PROBLEM_SOLUTION);`
`925`	`926`	`const psdoc = await solution.vote(domainId, psid, this.user._id, 1);`
`926`	`927`	`this.back({ vote: psdoc.vote, user_vote: 1 });`
`927`	`928`	`}`
`928`	`929`
`929`	`930`	`@param('psid', Types.ObjectId)`
`930`	`931`	`async postDownvote(domainId: string, psid: ObjectId) {`
	`932`	`+ this.checkPerm(PERM.PERM_VOTE_PROBLEM_SOLUTION);`
`931`	`933`	`const psdoc = await solution.vote(domainId, psid, this.user._id, -1);`
`932`	`934`	`this.back({ vote: psdoc.vote, user_vote: -1 });`
`933`	`935`	`}`