Description of the issue 馃搫
I noticed a UI glitch regarding event management permissions. When I create an event, the Manage button is visible to everyone on the frontend, instead of being restricted to super admins.
Security impact: Purely visual. If a non-admin clicks the "Manage" button, they are correctly blocked and cannot access the super admin pages.
Potential account context:
CharleneHQ (another super admin) can create an event as well, and the Manage button is visible only to her.
I am currently using my personal email (m.chiarapigoni@gmail.com) to log into Slack and GitHub, so I probably use it to log into the codebar website as well. I tried updating my Slack email to my official chiara@codebar.io address, but it says it is already in use (and I want to avoid creating a new account to prevent losing my Slack/GitHub history). I am mentioning this in case this email/account discrepancy is causing the permission-rendering glitch on the website.
Thanks!!
Screenshots 馃摲
Steps to fix 馃洜
To do 馃搵
Description of the issue 馃搫
I noticed a UI glitch regarding event management permissions. When I create an event, the Manage button is visible to everyone on the frontend, instead of being restricted to super admins.
Security impact: Purely visual. If a non-admin clicks the "Manage" button, they are correctly blocked and cannot access the super admin pages.
Potential account context:
CharleneHQ (another super admin) can create an event as well, and the Manage button is visible only to her.
I am currently using my personal email (m.chiarapigoni@gmail.com) to log into Slack and GitHub, so I probably use it to log into the codebar website as well. I tried updating my Slack email to my official chiara@codebar.io address, but it says it is already in use (and I want to avoid creating a new account to prevent losing my Slack/GitHub history). I am mentioning this in case this email/account discrepancy is causing the permission-rendering glitch on the website.
Thanks!!
Screenshots 馃摲
Steps to fix 馃洜
To do 馃搵