Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Access rights mismatch - people with rights for "Registrations" see Payments tab, but get Access denied #5072

vaclavstepan opened this issue Sep 2, 2021 · 0 comments


Copy link

Describe the bug
I have a conference with Manual and Bank transfer payment modules enabled.
A person has been granted Access and Registration rights using the Protection/Event protection tabs.
Now, she can enter the Management area and sees two tabs - Payments and Registrations.
But clicking on the Payments tab yields "You are not authorised to manage this event.".

To Reproduce
Steps to reproduce the behavior:

  1. Make a conference
  2. Enable payments, manual payment and Bank transfer module
  3. Make a registration form that results in money to be wired
  4. Add a person from accounting department with rights for Registration and explain her that she will handle registration payments.
  5. Let the user login and go to the management area.
  6. Let the user click Payments
  7. Run, Forest, run! Because the "You are not authorised" error will be displayed and the person will get confused.

Expected behavior
The payments tab should not be visible if the person has no right to access it.

@ThiefMaster ThiefMaster added this to the v3 milestone Sep 2, 2021
@ThiefMaster ThiefMaster self-assigned this Sep 2, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
None yet

No branches or pull requests

2 participants