Fix the bug that unpublished event would leak through /event/{id}

Author: bilibilistack

server/game_dev/views.py

@@ -60,7 +60,16 @@ class EventDetailAPIView(generics.RetrieveAPIView):
     lookup_url_kwarg = "id"
 
     def get_queryset(self):
-        return Event.objects.filter(id=self.kwargs["id"])
+        now = timezone.now().date()
+        return Event.objects.filter(id=self.kwargs["id"], publicationDate__lte=now)
+
+    def get_object(self):
+        queryset = self.get_queryset()
+        try:
+            return queryset.get()
+        except Event.DoesNotExist:
+            from rest_framework.exceptions import NotFound
+            raise NotFound(detail="The event is not yet published by admin or does not exist.")
 
 
 class GameshowcaseAPIView(APIView):