fix: unsafe change score

repository/quiz/impl.go

@@ -40,10 +40,10 @@ func (q *QuizRepositoryImpl) GetQuizDetail(quizId uuid.UUID) (*quiz.Quiz, error)
 	return result, nil
 }
 
-func (q *QuizRepositoryImpl) UpdateScore(quizId uuid.UUID, score int) error {
+func (q *QuizRepositoryImpl) UpdateScore(email string, quizId uuid.UUID, score int) error {
 	return q.db.
 		Model(&quiz.QuizTake{}).
-		Where("quiz_id = ?", quizId).
+		Where("quiz_id = ? AND email = ?", quizId, email).
 		Updates(quiz.QuizTake{
 			Score:      score,
 			IsFinished: true,

repository/quiz/type.go

@@ -8,7 +8,7 @@ import (
 type QuizRepository interface {
 	GetQuizes(courseId string) ([]quiz.Quiz, error)
 	GetQuizDetail(quizId uuid.UUID) (*quiz.Quiz, error)
-	UpdateScore(quizId uuid.UUID, score int) error
+	UpdateScore(email string, quizId uuid.UUID, score int) error
 	NewTake(quizId uuid.UUID, userEmail string) (uuid.UUID, error)
 	IsUserContributor(id string, email string) (bool, error)
 	NewQuiz(quiz quiz.Quiz) error

service/quiz/impl.go

@@ -180,7 +180,7 @@ func (q QuizServiceImpl) DoFinishQuiz(ctx context.Context, quizId uuid.UUID, ema
 		return nil, err
 	}
 
-	err = q.QuizRepository.UpdateScore(quizId, int(score))
+	err = q.QuizRepository.UpdateScore(email, quizId, int(score))
 
 	if err != nil {
 		return nil, err