Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Meeting creation: permission problem #2535

Closed
MSoeb opened this issue Jun 27, 2024 · 0 comments · Fixed by #2540
Closed

Meeting creation: permission problem #2535

MSoeb opened this issue Jun 27, 2024 · 0 comments · Fixed by #2540
Assignees
Milestone

Comments

@MSoeb
Copy link

MSoeb commented Jun 27, 2024

Description: When creating new meetings, it is possible for all committee admins to access the entire pool of ALL active meetings and use them as a basis for a new meeting. This is incorrect behavior, as it allows access to meeting for which a committee admin previously had no access.

Example image - committee admin have access to all active meetings
image

Reproduction:

  1. create two committees (A and B)
  2. create in both committees a meeting which is active
  3. create a new user XYZ and add to committee A as committee admin
  4. Log in as user XYZ and open committee A
  5. create a new meeting. in the template field the meeting from committee B should be visible

What should happen?
When creating new meetings by duplication, it should only be possible to use meeting templates or meetings of the committee in which the new meeting should be created. Meetings for which the committee admin does not have access authorization, i.e. which are not part of the committee or a template, should not be displayed in the list of possible meetings for duplication.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants