don't show dojos with passwords

pwncollege · Jan 23, 2024 · 090d62d · 090d62d
1 parent d6f746e
commit 090d62d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/dojo_plugin/models/__init__.py b/dojo_plugin/models/__init__.py
@@ -185,7 +185,7 @@ def viewable(cls, id=None, user=None):
         return (
             (cls.from_id(id) if id is not None else cls.query)
             .filter(or_(cls.official,
-                        cls.data["type"] == "public",
+                        and_(cls.data["type"] == "public", cls.password == None),
                         cls.dojo_id.in_(db.session.query(DojoUsers.dojo_id)
                                         .filter_by(user=user)
                                         .subquery())))