First of all, an excellent module with real simple configuration and UI. However, I am having a little problem with the "Manage Invites" tab on the node page. Though I have set the permissions for authenticated users to only "manage own invites", but the "Manage Invites" tab still shows all the invites and not just "own invites". However, it correctly denies the user from revoking, resending, etc. (i.e. managing) other users invites.

I am not sure if this is a bug or a feature that it is displaying all invites and not just own invites on the "Manage Invites" tab. I would have hoped to see it work as "My Invites" tab on the My Account menu.

Please let us know, if this is a bug or not. Once again, thanks very much for an excellent module.

Regards,

Saurabh Kumar

Comments

hadsie’s picture

hadsie commented
Component: User interface » Code
Assigned: Unassigned » hadsie
Category: support » bug

I'm pretty sure that this is a bug. I haven't tested the "own invites" stuff very well...

hadsie’s picture

hadsie commented
Status: Active » Fixed

Ok, so I've been going over this, and it actually will list the revoke/resend links for invites that the user didn't actually send, which isn't right. So that is fixed now. But the main thing here I don't believe is a bug, i.e. that it lists all invites for the the event, not just the ones they sent. I believe that anyone who's sending out invites should probably also be allowed to view all the sent invites otherwise they won't know if they're inviting people who have already been invited.

There's probably a need for more complex access control here, however, as anyone who can send out invites can send out invites on all invite enabled nodes. Anyway, the revoke/resend stuff is fixed in CVS now and will be included in the 2.3 release.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.