search

metrotranscom / doorway

component-based web framework for affordable housing management
Apache License 2.0
3 stars 1 forks source link

Prevent application submissions from the public site if the listing isn't using the common app #698

Open YazeedLoonat opened 1 week ago

YazeedLoonat commented 1 week ago

Currently via url manipulation an applicant on the public site can access a listing's common application flow even if the listing has that turned off.

We want to prevent this in 2 ways:

  1. on the public site if an applicant ends up in the common app flow but the listing has the common app flow turned off the applicant should be sent back to the listing detail page maybe with a message that the listing is not using the common app flow

  2. on the api if a public application submission comes through but the listing is not using the common app the api should throw an error to prevent the attempted submission from progressing

sarahlazarich commented 1 day ago

Fix in both core and Doorway Might be slightly different solutions but should do both Can also handle MA through Core toggle

From a user perspective, this should follow the same flow as a closed listing Might need to tweak the error message