Early Bird Registration for DrupalCon Portland 2024 is open! Register by 23:59 PST on 31 March 2024, to get $100 off your ticket.
I created a patch to let Anonymous users first review (view) their own registration before paying for them. https://www.drupal.org/node/2443091 Which created the issue of payment page access. I've updated that access to use the same method as my patch for securing anonymous user access to view registrations. https://www.drupal.org/node/2224159 It checks to see if the anonymous user created the specific registration using the sessions. This is similar to the way Commerce grants access to an anonymous user to view their own order confirmation.
Comment | File | Size | Author |
---|---|---|---|
anonymous_pay_for_own-1.diff | 976 bytes | jlockhart |
Comments
Comment #1
jlockhartsetting to needs review
Comment #2
gcbI'm not clear on how that session variable is getting set? Is there a missing piece to this patch?