forbid users to import an exercise they do not have access to (previously a new one was created)

2019-12-18 17:52:34 +01:00
parent 12c76b2fe4
commit f49cd0bed4
5 changed files with 24 additions and 4 deletions
--- a/app/controllers/exercises_controller.rb
+++ b/app/controllers/exercises_controller.rb
@ -188,6 +188,8 @@ class ExercisesController < ApplicationController
      exercise.save!
      return render json: {}, status: 201
    end
+  rescue Proforma::ExerciseNotOwned
+    render json: {}, status: 401
  rescue Proforma::ProformaError
    render json: t('exercises.import_codeharbor.import_errors.invalid'), status: 400
  rescue StandardError