Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fixes for committee admin #3891

Closed
Elblinator opened this issue Jul 17, 2024 · 0 comments · Fixed by #3897
Closed

Fixes for committee admin #3891

Elblinator opened this issue Jul 17, 2024 · 0 comments · Fixed by #3897
Assignees
Milestone

Comments

@Elblinator
Copy link
Member

Elblinator commented Jul 17, 2024

Describe the bug
The committee admin can currently do two things which should be prevented.
The committee admin can press the link to the account-list even if they should't be allowed to.
The committee admin can see more accounts than they should in the account-list

How to Reproduce
Steps to reproduce the behaviour:

  1. create a committee with one meeting (A)
  2. create a committee admin
  3. create a different committee with a meeting (B)
  4. add the committee admin (as admin) to meeting B
  5. add another participant to B, the participant is not allowed to be in meeting A
  6. as the committee admin navigate to the detail view of the second committee
  7. you can see the other meeting and press on the icon which shows how many participants are in the meeting
  8. if you press the button you are navigated to the filtered account list and you can open the detail view from the other participant
  9. remove the filter and activate the filter for meeting A
  10. remove the filter
  11. the participant from meeting B becomes visible

Expected behaviour
Nr 7. and Nr.11 should not be possible/happen

  1. You should only be able to navigate via this button if you are the committee admin for the committee you are currently looking at
  2. In the account-list you should only see accounts from users from your own committee
@Elblinator Elblinator added the bug label Jul 17, 2024
@Elblinator Elblinator added this to the 4.2 milestone Jul 17, 2024
@Elblinator Elblinator changed the title Small fixes for committee admin Fixes for committee admin Jul 18, 2024
@luisa-beerboom luisa-beerboom self-assigned this Jul 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants