🔒 Enforce login for cheat-prevented parties

NeoLegends · leolabs · NeoLegends · commit eae3fa593755 · 2018-05-05T01:03:33.000+02:00
Co-Authored-By: Leo Bernard &lt;admin@leolabs.org&gt;
diff --git a/database.rules.bolt b/database.rules.bolt
@@ -86,7 +86,12 @@ path /votes_by_user/{partyId}/{userId}/{trackId} is VotesPermissions {
 }
 
 type VotesPermissions {
-    write() { isCurrentUser(userId) }
+    write() {
+        isCurrentUser(userId) &&
+            (root.parties[partyId].settings == null ||
+             root.parties[partyId].settings.allow_anonymous_voters ||
+             auth.provider != "anonymous")
+    }
     validate() { partyExists(partyId) }
 }
 

Original file line number	Diff line number	Diff line change
`@@ -86,7 +86,12 @@ path /votes_by_user/{partyId}/{userId}/{trackId} is VotesPermissions {`
`86`	`86`	`}`
`87`	`87`
`88`	`88`	`type VotesPermissions {`
`89`		`- write() { isCurrentUser(userId) }`
	`89`	`+ write() {`
	`90`	`+ isCurrentUser(userId) &&`
	`91`	`+ (root.parties[partyId].settings == null \|\|`
	`92`	`+ root.parties[partyId].settings.allow_anonymous_voters \|\|`
	`93`	`+ auth.provider != "anonymous")`
	`94`	`+ }`
`90`	`95`	`validate() { partyExists(partyId) }`
`91`	`96`	`}`
`92`	`97`