search

hpi-swt2 / event-und-raumplanung

Ein Tool das die interne Planung von Events verbessern soll und dabei besonderen Fokus auf die Zuteilung von Räumen und Ausstattung legt.
GNU Affero General Public License v3.0
10 stars 5 forks source link

[CRITICAL] Open Requests page not accessible as room owner #323

Open leoselig opened 9 years ago

leoselig commented 9 years ago

At the moment only the admin seems to have the "Open requests" link in the navigation available However, this must be available for all users who can approve events (all users that are in a group)

@Atyanar @kaozente @olegsfinest

SvenLehmann commented 9 years ago

I can not reproduce that bug. If I login with my student account and am not member of any group, I can´t see the link. However, when an admin adds me to a group, the link becomes visible, as you expected, right?

leoselig commented 9 years ago

The bug persists At this very moment, I am assigned to the group "Test" (I even am the group leader) and when I visit any page the "Open Requests" link in the nav bar is not visible I also get an authorization error when I try to access the route (which is at least consistent, but still wrong)

SvenLehmann commented 9 years ago

the group "test" did not have the right to approve events (check /permissions for the entity test).

I just permitted "test" to approve events for room A-1.1. When I now reload the page with my own account, I can review all open requests for room A-1.1, but not any other rooms.

However, I am sure that you can approve any other room/event by sending POSTs ;)