Project

General

Profile

Bug #5460

I can edit venues

Added by Raffi Khatchadourian almost 3 years ago. Updated almost 3 years ago.

Status:
Resolved
Priority name:
Normal
Assignee:
Category name:
Events
Target version:
Start date:
2016-04-15
Due date:
% Done:

0%

Estimated time:

Description

I was able to navigate to this page: https://commons.gc.cuny.edu/wp-admin/edit.php?post_type=event&page=venues&action=edit&event-venue=city-college-ccny. It seems that I can update the list of venues. Should that be legal?

History

#1 Updated by Matt Gold almost 3 years ago

  • Status changed from New to Assigned
  • Assignee set to Boone Gorges

#2 Updated by Boone Gorges almost 3 years ago

  • Status changed from Assigned to Resolved
  • Target version set to 1.9.14

Thanks for the ticket, Raffi. Because of some details related to the way that the Event Organiser plugin implements the Venues functionality, we have to grant non-admin users the ability to manage venues from the front end. But we should not give the same ability to these users on the Dashboard. I've made the change in https://github.com/cuny-academic-commons/bp-event-organiser/commit/e49aeb3dbf2dc514a45f98c5388dca94c73fc7fe and it will be part of today's release.

Also available in: Atom PDF