search

cap-md089 / evmplus-v6

The source code for the Event Manager+ suite of tools for Civil Air Patrol units
GNU General Public License v2.0
7 stars 4 forks source link

Draft only permission level allows attendee delete interface #104

Open grioux-neo opened 3 years ago

grioux-neo commented 3 years ago

Describe the bug Draft only permission level allows attendee delete interface. Upon activation the attendee record is removed from the display.

To Reproduce Steps to reproduce the behavior:

  1. Su as member with draft only permission
  2. Go to event drafted by that member with attendance records
  3. Expand other member attendance record, click 'Remove' button
  4. See record removed from display
  5. Refresh page
  6. See record back on display

Expected behavior Delete button should not be displayed for members without delete permission