BristolSTA / uobtheatre-api

API for UOBTheatre.com
8 stars 1 forks source link

Society "Managers" should be able to see all of the societies shows #608

Open atoff opened 2 years ago

atoff commented 2 years ago

At the moment, permissions on whether someone can see a production is based on if they have the view/change permission on the production node.

If a user has "edit" permission on a society, they should probably also be able to see all of the productions associated with their society.

For example, new presidents wanting to see historical show sales when the old production team have left / are not contactable.

Guidedriver0 commented 1 year ago

Are all shows made by the president of the society, would they not already have access to all productions?

atoff commented 1 year ago

Are all shows made by the president of the society, would they not already have access to all productions?

This is only because of the way we currently get people to try and do things (i.e. we try to get them to use one account). There are still some societies that make the production on a personal account that still has permissions from last year. What this issue is saying is that if a user has the "edit_society" permission on a society, they should also be able to see all of the productions for their society in the admin panel without needing the "view_production" permission to be manually assigned

Guidedriver0 commented 1 year ago

Okay cool