Closed Shaik-Sirajuddin closed 3 days ago
In general admin of team would have access for all team bookings Currently api allows any user of team to have this privilege Unsure whether this is expected behaviour
In case User C is owner / admin of the team, it can delete / modify any bookings of that team irrespective of whether the user is in the booking or not. There is a PR open to allow admin / owner to cancel the booking via the app too
Can confirm that currently, members can access all team bookings. Members should only be able to access bookings they are part of
Found a bug? Please fill out the sections below. 👍
Issue Summary
A member of team is able to gain access to team bookings ( update , cancel , e.t.c ) in case of round robin event type , even if the user is not present as round robin host
Actual Results
Expected Results
Evidence
Loom : Video