diff --git a/judge/views/problem.py b/judge/views/problem.py index 1403b3c..76c118c 100644 --- a/judge/views/problem.py +++ b/judge/views/problem.py @@ -681,6 +681,9 @@ class ProblemClone(ProblemMixin, PermissionRequiredMixin, TitleMixin, SingleObje def download_submissions(request, problem): + if not request.user.is_superuser: + raise Http404 + submissions = Submission.objects.filter(problem__code=problem, result='AC') with tempfile.SpooledTemporaryFile() as tmp: