From f99dff192bd09fdbbfde448cbaf6fc6179479fa3 Mon Sep 17 00:00:00 2001
From: ks129 <45097959+ks129@users.noreply.github.com>
Date: Wed, 23 Dec 2020 10:48:29 +0200
Subject: Check does form exists in responses bulk DELETE

---
 backend/routes/forms/responses.py | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

(limited to 'backend/routes')

diff --git a/backend/routes/forms/responses.py b/backend/routes/forms/responses.py
index d378187..baab856 100644
--- a/backend/routes/forms/responses.py
+++ b/backend/routes/forms/responses.py
@@ -50,6 +50,11 @@ class Responses(Route):
     )
     async def delete(self, request: Request) -> JSONResponse:
         """Bulk deletes form responses by IDs."""
+        if not await request.state.db.forms.find_one(
+            {"_id": request.path_params["form_id"]}
+        ):
+            return JSONResponse({"error": "not_found"}, status_code=404)
+
         data = await request.json()
 
         if "ids" not in data:
@@ -69,7 +74,7 @@ class Responses(Route):
         if len(ids) != len(actual_ids):
             return JSONResponse(
                 {
-                    "error": "not_found",
+                    "error": "responses_not_found",
                     "ids": list(ids - actual_ids)
                 },
                 status_code=404
-- 
cgit v1.2.3