cap-md089 / evmplus-v6

The source code for the Event Manager+ suite of tools for Civil Air Patrol units
GNU General Public License v2.0
7 stars 4 forks source link

Member with POC only permission can copy event #110

Open grioux-neo opened 3 years ago

grioux-neo commented 3 years ago

Describe the bug Member with POC only permission (not manager or admin) can copy an event they are designated as a POC, effectively creating new events with them as the author, giving (semi) permanent permission to control that event.

To Reproduce Steps to reproduce the behavior:

  1. Su as standard member who is designated as POC for an event
  2. Go to event where they are POC
  3. See copy event link

Expected behavior Copy function should only be allowed for duty positions (OPSO, etc.), managers, and admins.