完善OI细则

contest/models.py

@@ -45,6 +45,14 @@ class Contest(models.Model):
     def is_contest_admin(self, user):
         return user.is_authenticated() and (self.created_by == user or user.admin_type == AdminType.SUPER_ADMIN)
 
+    def check_oi_permission(self, user):
+        if self.status != ContestStatus.CONTEST_ENDED and self.real_time_rank == False:
+            if self.is_contest_admin(user):
+                return True
+            else:
+                return False
+        return True
+
     class Meta:
         db_table = "contest"
         ordering = ("-create_time",)

contest/views/oj.py

@@ -67,7 +67,7 @@ class ContestPasswordVerifyAPI(APIView):
         # password verify OK.
         if "accessible_contests" not in request.session:
             request.session["accessible_contests"] = []
-        request.session["contests"].append(contest.id)
+        request.session["accessible_contests"].append(contest.id)
         # https://docs.djangoproject.com/en/dev/topics/http/sessions/#when-sessions-are-saved
         request.session.modified = True
         return self.success(True)
@@ -93,10 +93,12 @@ class ContestRankAPI(APIView):
 
     @check_contest_permission
     def get(self, request):
-        if self.contest.rule_type == ContestRuleType.ACM:
-            serializer = ACMContestRankSerializer
-        else:
+        if self.contest.rule_type == ContestRuleType.OI:
+            if not self.contest.check_oi_permission(request.user):
+                return self.error("You have no permission for ranks now")
             serializer = OIContestRankSerializer
+        else:
+            serializer = ACMContestRankSerializer
 
         cache_key = f"{CacheKey.contest_rank_cache}:{self.contest.id}"
         qs = cache.get(cache_key)