search

cap-md089 / evmplus-v6

The source code for the Event Manager+ suite of tools for Civil Air Patrol units
GNU General Public License v2.0
7 stars 4 forks source link

Email list link presented to unauthorized members #108

Open grioux-neo opened 3 years ago

grioux-neo commented 3 years ago

Describe the bug Email list link is present for members who do not have permission to view contact information

To Reproduce Steps to reproduce the behavior:

  1. Su as member with draft only permission
  2. Go to event not drafted by that member with attendance records
  3. Click on email list link
  4. See pop-up with n-1 commas
  5. Go to event drafted by that member with attendance records
  6. Click on email list link
  7. See fully populated pop-up

Expected behavior Email list link should not be present for members with draft only permission level