You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
The committee admin can currently do two things which should be prevented.
The committee admin can press the link to the account-list even if they should't be allowed to.
The committee admin can see more accounts than they should in the account-list
How to Reproduce
Steps to reproduce the behaviour:
create a committee with one meeting (A)
create a committee admin
create a different committee with a meeting (B)
add the committee admin (as admin) to meeting B
add another participant to B, the participant is not allowed to be in meeting A
as the committee admin navigate to the detail view of the second committee
you can see the other meeting and press on the icon which shows how many participants are in the meeting
if you press the button you are navigated to the filtered account list and you can open the detail view from the other participant
remove the filter and activate the filter for meeting A
remove the filter
the participant from meeting B becomes visible
Expected behaviour
Nr 7. and Nr.11 should not be possible/happen
You should only be able to navigate via this button if you are the committee admin for the committee you are currently looking at
In the account-list you should only see accounts from users from your own committee
The text was updated successfully, but these errors were encountered:
Describe the bug
The committee admin can currently do two things which should be prevented.
The committee admin can press the link to the account-list even if they should't be allowed to.
The committee admin can see more accounts than they should in the account-list
How to Reproduce
Steps to reproduce the behaviour:
Expected behaviour
Nr 7. and Nr.11 should not be possible/happen
The text was updated successfully, but these errors were encountered: