比赛相关api都需要登录

account/decorators.py

@@ -79,14 +79,15 @@ def check_contest_permission(check_type="details"):
             except Contest.DoesNotExist:
                 return self.error("Contest %s doesn't exist" % contest_id)
 
-            # creator or owner
-            if user.is_authenticated() and user.is_contest_admin(self.contest):
-                return func(*args, **kwargs)
-
-            if self.contest.contest_type == ContestType.PASSWORD_PROTECTED_CONTEST:
             # Anonymous
             if not user.is_authenticated():
                 return self.error("Please login first.")
+
+            # creator or owner
+            if user.is_contest_admin(self.contest):
+                return func(*args, **kwargs)
+
+            if self.contest.contest_type == ContestType.PASSWORD_PROTECTED_CONTEST:
                 # password error
                 if self.contest.id not in request.session.get("accessible_contests", []):
                     return self.error("Password is required.")