user info + max size

opus_submitter/submissions/api.py

@@ -5,13 +5,13 @@ from django.db import transaction
 from django.core.files.base import ContentFile
 from django.http import Http404
 from django.utils import timezone
+from django.shortcuts import get_object_or_404
 from typing import List
 
 from .models import Submission, PuzzleResponse, SubmissionFile, SteamCollectionItem
 from .schemas import (
     SubmissionIn,
     SubmissionOut,
-    SubmissionListOut,
     PuzzleResponseOut,
     ValidationIn,
     SteamCollectionItemOut,
@@ -26,23 +26,24 @@ def list_puzzles(request):
     return SteamCollectionItem.objects.select_related("collection").all()
 
 
-@router.get("/submissions", response=List[SubmissionListOut])
+@router.get("/submissions", response=List[SubmissionOut])
 @paginate
 def list_submissions(request):
     """Get paginated list of submissions"""
-    return Submission.objects.prefetch_related("responses").all()
+    return Submission.objects.prefetch_related(
+        "responses__files", "responses__puzzle"
+    ).filter(user=request.user)
 
 
 @router.get("/submissions/{submission_id}", response=SubmissionOut)
 def get_submission(request, submission_id: str):
     """Get detailed submission by ID"""
-    try:
-        submission = Submission.objects.prefetch_related(
+    return get_object_or_404(
+        Submission.objects.prefetch_related(
             "responses__files", "responses__puzzle"
-        ).get(id=submission_id)
-        return submission
-    except Submission.DoesNotExist:
-        raise Http404("Submission not found")
+        ).filter(user=request.user),
+        id=submission_id,
+    )
 
 
 @router.post("/submissions", response=SubmissionOut)
@@ -104,9 +105,9 @@ def create_submission(
                             "detail": f"Invalid file type: {uploaded_file.content_type}"
                         }
 
-                    # Validate file size (10MB limit)
-                    if uploaded_file.size > 10 * 1024 * 1024:
-                        return 400, {"detail": "File too large (max 10MB)"}
+                    # Validate file size (256MB limit)
+                    if uploaded_file.size > 256 * 1024 * 1024:
+                        return 400, {"detail": "File too large (max 256MB)"}
 
                     # Create submission file
                     submission_file = SubmissionFile.objects.create(