fix: do not allow update collection for locked subject

bangumi · Oct 14, 2024 · 22d04e7 · 22d04e7
1 parent d6efd91
commit 22d04e7
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/web/handler/user/patch_subject_collection.go b/web/handler/user/patch_subject_collection.go
@@ -84,6 +84,10 @@ func (h User) updateOrCreateSubjectCollection(
 		return errgo.Wrap(err, "query.GetSubject")
 	}
 
+	if s.Locked() {
+		return res.NotFound("subject locked")
+	}
+
 	if s.TypeID != model.SubjectTypeBook {
 		if r.VolStatus.Set || r.EpStatus.Set {
 			return res.BadRequest("can't set 'vol_status' or 'ep_status' on non-book subject")