Skip to content

Bug: "Manage" button is publicly visible to all users on the upcoming event pages#2869

Description

@kikilondon

Description of the issue 馃搫

I noticed a UI glitch regarding event management permissions. When I create an event, the Manage button is visible to everyone on the frontend, instead of being restricted to super admins.

Security impact: Purely visual. If a non-admin clicks the "Manage" button, they are correctly blocked and cannot access the super admin pages.

Potential account context:
CharleneHQ (another super admin) can create an event as well, and the Manage button is visible only to her.
I am currently using my personal email (m.chiarapigoni@gmail.com) to log into Slack and GitHub, so I probably use it to log into the codebar website as well. I tried updating my Slack email to my official chiara@codebar.io address, but it says it is already in use (and I want to avoid creating a new account to prevent losing my Slack/GitHub history). I am mentioning this in case this email/account discrepancy is causing the permission-rendering glitch on the website.
Thanks!!

Screenshots 馃摲

Image Image

Steps to fix 馃洜

To do 馃搵

  • Claim this issue (comment below, or assign yourself if you are part of the codebar org)
  • Fork and clone the repository
  • Update the relevant files. Follow the steps to fix section in this issue.
  • Commit your changes as one commit. Use the title of this issue as your commit message
  • Submit a pull request
  • Mention this issue in the PR description by including it's number
  • Have your pull request reviewed & merged by a codebar team member

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions