diff --git a/app/Http/Controllers/StoryComposeController.php b/app/Http/Controllers/StoryComposeController.php
index dddc7412f..ee99f741e 100644
--- a/app/Http/Controllers/StoryComposeController.php
+++ b/app/Http/Controllers/StoryComposeController.php
@@ -18,6 +18,7 @@ use App\Services\FollowerService;
 use App\Services\MediaPathService;
 use App\Services\StoryIndexService;
 use App\Services\StoryService;
+use App\Services\UserFilterService;
 use App\Services\UserRoleService;
 use App\Util\Media\ImageDriverManager;
 use FFMpeg;
@@ -398,7 +399,10 @@ class StoryComposeController extends Controller
         $pid = $request->user()->profile_id;
         $ci = $request->input('ci');
         $story = Story::findOrFail($request->input('sid'));
-        abort_if(! FollowerService::follows($pid, $story->profile_id), 403);
+        abort_if(now()->gt($story->expires_at), 404);
+        abort_if($story->profile_id == $pid, 422, 'Cannot vote on your own story');
+        abort_if(! FollowerService::follows($pid, $story->profile_id), 422, 'Cannot vote on a story from an account you do not follow');
+        abort_if(in_array($pid, UserFilterService::blocks($story->profile_id)), 403);
         $poll = Poll::whereStoryId($story->id)->firstOrFail();
 
         $vote = new PollVote;
@@ -451,9 +455,10 @@ class StoryComposeController extends Controller
         abort_if(! in_array($type, $types), 422, 'Invalid story report type');
 
         $story = Story::findOrFail($sid);
-
+        abort_if(now()->gt($story->expires_at), 404);
         abort_if($story->profile_id == $pid, 422, 'Cannot report your own story');
         abort_if(! FollowerService::follows($pid, $story->profile_id), 422, 'Cannot report a story from an account you do not follow');
+        abort_if(in_array($pid, UserFilterService::blocks($story->profile_id)), 403);
 
         if (Report::whereProfileId($pid)
             ->whereObjectType(Story::class)
@@ -491,6 +496,12 @@ class StoryComposeController extends Controller
         $user = $request->user();
         abort_if($user->has_roles && ! UserRoleService::can('can-use-stories', $user->id), 403, 'Invalid permissions for this action');
         $story = Story::findOrFail($request->input('sid'));
+        abort_if(now()->gt($story->expires_at), 404);
+        abort_if(
+            $story->profile_id !== $pid && ! FollowerService::follows($pid, $story->profile_id),
+            403
+        );
+        abort_if(in_array($pid, UserFilterService::blocks($story->profile_id)), 403);
 
         abort_if(! $story->can_react, 422);
         abort_if(StoryService::reactCounter($story->id, $pid) >= 5, 422, 'You have already reacted to this story');
@@ -570,6 +581,12 @@ class StoryComposeController extends Controller
         $user = $request->user();
         abort_if($user->has_roles && ! UserRoleService::can('can-use-stories', $user->id), 403, 'Invalid permissions for this action');
         $story = Story::findOrFail($request->input('sid'));
+        abort_if(now()->gt($story->expires_at), 404);
+        abort_if(
+            $story->profile_id !== $pid && ! FollowerService::follows($pid, $story->profile_id),
+            403
+        );
+        abort_if(in_array($pid, UserFilterService::blocks($story->profile_id)), 403);
 
         abort_if(! $story->can_reply, 422);