fix issue where any one can see any answers

1 files changed, 2 insertions, 2 deletions

diff --git a/services/app/src/App.php b/services/app/src/App.php
index e7d2816..3eedfe7 100644
--- a/services/app/src/App.php
+++ b/services/app/src/App.php
@@ -388,7 +388,7 @@ final class App
             throw new HttpNotFoundException($request);
         }
         $currentUser = $this->getCurrentUser($request);
-        if ($quiz->isOpenToAnswer() && $answer->author_id !== $currentUser?->user_id) {
+        if (!$quiz->isFinished() && $answer->author_id !== $currentUser?->user_id) {
             throw new HttpForbiddenException($request);
         }
 
@@ -887,7 +887,7 @@ final class App
         if ($quiz === null) {
             throw new HttpNotFoundException($request);
         }
-        if ($quiz->isOpenToAnswer() && $answer->author_id !== $currentUser->user_id) {
+        if (!$quiz->isFinished() && $answer->author_id !== $currentUser->user_id) {
             throw new HttpForbiddenException($request);
         }