Note: the identical behavior is observed for "Groups" as well as "Spaces".

Given
- Authenticated users have permission to view any user's profile
- Alice is a member of Apple Food Co-op space
- Charlie is not
- Alice is the logged in user

When
- Alice visits Charlie's user profile page at /users/charlie
And
- Alice clicks the widget in the top right corner of the profile page and selects 'Groups'

Then
- Alice will now be at the page /user/8/spaces (Charlie is user 8)
- Alice will see the heading, "Charlie's spaces" and listed will be "Apple Food Co-op", of which Alice is a member but Charlie is not
(see attached screenshot)

Expected:
- Alice will see the spaces that Charlie is a member of (that she has permission to see)
- Alice will not see her own spaces listed

I'm fairly new to Open Atrium 2, was not an OA1 user, so still wrapping my head around the way we do things here. This is a new sandbox site set up just to play with the OA2 concepts. It's running from the openatrium-2.12 install profile tarball. All non-OA contrib modules are disabled save masquerade (though I had previously installed profile2 and party).

Would love to know if other people are experiencing the same issue. Thanks!

CommentFileSizeAuthor
space-listing-screenshot.png31.04 KBjakeschlachter

Comments

mpotter’s picture

I confirm this problem and have added it to the bug list.

mpotter’s picture

Status: Active » Fixed

Fixed in commit 12664b2 of oa_core. Sorry didn't get this in time to make it into the 2.13 release today, but you can grab the latest -dev version of oa_core from github if you need it.

jakeschlachter’s picture

Status: Fixed » Closed (fixed)

Fix is confirmed. Thanks Mike!