New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Session block manager able to reveal whole schedule for day of Session block #3474

Closed
glunardi opened this Issue Jul 26, 2018 · 4 comments

Comments

Projects
None yet
2 participants
@glunardi

glunardi commented Jul 26, 2018

With a restricted event (CfP still in progress, else,...), a manager assigned to a single Session (and Session Block) can see the schedule for the whole day by mistake.

Steps to reproduce (as a Session manager with no other admin privileges)

  • Go to the top-level timetable,
  • Click on your session block,
  • Click the "Change colour" button,
  • Click any colour,
  • Once it is done processing, it will show the other items on that day.
  • Refresh the page, the other items disappear again

Expected: Only the colour should have changed, the other items in the agenda should not have been shown.

@glunardi

This comment has been minimized.

glunardi commented Jul 26, 2018

Screenshot with correct view:

screenshot from 2018-07-25 23-19-48

@glunardi

This comment has been minimized.

glunardi commented Jul 26, 2018

Screenshot after only changing the colour

screenshot from 2018-07-25 23-20-35

As you can see, the "breaks" appear even though that user is not allowed to see them (example for this issue). If you just refresh the page, the colour change is saved and the items that should not be visible disappear.

@glunardi

This comment has been minimized.

glunardi commented Jul 26, 2018

This was experienced on version is 2.0.3. We have not been able to upgrade yet.

Our publicly accessible site can be found here: https://www.linuxplumbersconf.org/

@ThiefMaster

This comment has been minimized.

Member

ThiefMaster commented Jul 30, 2018

We will not release any updates for 2.0, but include it in the next 2.1 bugfix release. Probably you can manually apply the fix from #3476 though. But please wait until it's merged; it's not completely finished yet!

ThiefMaster added a commit to mic4ael/indico that referenced this issue Jul 30, 2018

ThiefMaster added a commit to mic4ael/indico that referenced this issue Jul 30, 2018

mic4ael added a commit to mic4ael/indico that referenced this issue Jul 30, 2018

mic4ael added a commit to mic4ael/indico that referenced this issue Jul 30, 2018

mic4ael added a commit to mic4ael/indico that referenced this issue Jul 30, 2018

ThiefMaster added a commit to ThiefMaster/indico that referenced this issue Aug 9, 2018

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment