I think that the author of the node should be able to access this page providing he has the 'administer signups for own content' access rights. With this right the owner can access the signup administration page and see the signups list anyways, so why should the signups list be restricted to him?

The attached patch adds this logic to the access control.

CommentFileSizeAuthor
#2 373260-2.admin-can-view-signups.patch2.5 KBdww
s.patch1.82 KBmiglius

Comments

dww’s picture

dww
we/he/they
commented
Title: The owner of the node cannot access 'node/%/signups/list' » Let the owner of the node access 'node/%/signups/list' if they have 'administer signups for own content'
Category: bug » feature
Priority: Critical » Normal

I'll return to the signup issue queue next week -- i've been busy with d.o upgrade to D6. This definitely isn't a "critical bug". ;)

dww’s picture

dww
we/he/they
commented
Title: Let the owner of the node access 'node/%/signups/list' if they have 'administer signups for own content' » Allow users with 'administer signups' perms on a node view the attendee list
Assigned: Unassigned » dww
Category: feature » task
StatusFileSize
new 373260-2.admin-can-view-signups.patch2.5 KB

Actually, if we're going to do what the original patch does, we should go all the way, and make it so any user with 'administer signups' perms on a node (either site-wide 'admin signups' or 'admin signups for own content' for the node owner) effectively has 'view all signups' permission. That's actually what the INSTALL.txt file says already, but it's not really how the code works. ;) Any objections?

dww’s picture

dww
we/he/they
commented
Title: Allow users with 'administer signups' perms on a node view the attendee list » Allow users with 'administer signups' perms on a node to view the attendee list
dww’s picture

dww
we/he/they
commented
Status: Active » Needs review
miglius’s picture

miglius commented

I think this is a correct assumption.

dww’s picture

dww
we/he/they
commented
Status: Needs review » Fixed

Committed to HEAD and D6--1.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.