添加contest ip限制api；

OI problem的AC，total count也算入profile了

account/decorators.py

@@ -82,7 +82,7 @@ def check_contest_permission(check_type="details"):
                 return self.error("Contest %s doesn't exist" % contest_id)
 
             # creator or owner
-            if self.contest.is_contest_admin(user):
+            if user.is_authenticated() and user.is_contest_admin(self.contest):
                 return func(*args, **kwargs)
 
             if self.contest.contest_type == ContestType.PASSWORD_PROTECTED_CONTEST:

account/models.py

@@ -59,6 +59,9 @@ class User(AbstractBaseUser):
     def can_mgmt_all_problem(self):
         return self.problem_permission == ProblemPermission.ALL
 
+    def is_contest_admin(self, contest):
+        return self.is_authenticated() and (contest.created_by == self or self.admin_type == AdminType.SUPER_ADMIN)
+
     class Meta:
         db_table = "user"
 

account/views/oj.py

@@ -277,6 +277,8 @@ class UserChangePasswordAPI(APIView):
 class ApplyResetPasswordAPI(APIView):
     @validate_serializer(ApplyResetPasswordSerializer)
     def post(self, request):
+        if request.user.is_authenticated():
+            return self.error("You have already logged in, are you kidding me? ")
         data = request.data
         captcha = Captcha(request)
         if not captcha.check(data["captcha"]):