diff --git a/account/decorators.py b/account/decorators.py index 92f2908..7d89657 100644 --- a/account/decorators.py +++ b/account/decorators.py @@ -79,14 +79,15 @@ def check_contest_permission(check_type="details"): except Contest.DoesNotExist: return self.error("Contest %s doesn't exist" % contest_id) + # Anonymous + if not user.is_authenticated(): + return self.error("Please login first.") + # creator or owner - if user.is_authenticated() and user.is_contest_admin(self.contest): + if user.is_contest_admin(self.contest): return func(*args, **kwargs) if self.contest.contest_type == ContestType.PASSWORD_PROTECTED_CONTEST: - # Anonymous - if not user.is_authenticated(): - return self.error("Please login first.") # password error if self.contest.id not in request.session.get("accessible_contests", []): return self.error("Password is required.")