search

cap-md089 / evmplus-v6

The source code for the Event Manager+ suite of tools for Civil Air Patrol units
GNU General Public License v2.0
7 stars 4 forks source link

Draft only permission level allows move/delete of events not created by that member #106

Open grioux-neo opened 3 years ago

grioux-neo commented 3 years ago

Describe the bug Draft only permission level allows move/delete of events not created by that member.

To Reproduce Steps to reproduce the behavior:

  1. Su as member with draft only permission level
  2. Go to event not drafted by that member
  3. Click move/delete

Expected behavior Member with draft only permission level should only be able to move/delete events they created. They should not be able to move/delete events other members have created.