series request limit can be bypassed by users #633

Description

If you have a "Series Request Limit" set for a user, for example

4 Seasons per 7 days

The user is able to bypass the season limit when you have the "Auto Approve" setting disabled.

While it's in the "Pending State" awaiting admin approval, the user can go back in and edit the request and select more seasons than they are allowed.

Version

1.7.0

Steps to Reproduce

1. Create a test user
2. Assign a limit to this user for seasons. For example, allow 4 season requests per 7 days. Note: Assign a limit to the user using the Override Global Limit option, don't assign a limit to the user just using the global limit. (General > Users > Select User > General Tab > Series Request Limit > Override Global Limit)
3. Disable "Auto Approve" for this user, so that it requires admin approval.
4. On the test user, request a show that has more than 4 seasons, but select all that you're allotted to (4 seasons), Then submit
5. Once submitted, head to the requests tab, edit your request, then select the remaining seasons and click save.

Screenshots

Logs

No response

Platform

desktop

Device

Any

Operating System

Unraid

Browser

Any

Additional Context

No response

Code of Conduct

• I agree to follow Jellyseerr's Code of Conduct