Logged in users can see Edit/delete button für global event but they can not edit/delete this event

Bug #523497 reported by Thomas Bechtold
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
LoCo Team Portal
Fix Released
Medium
Michael Hall

Bug Description

Every logged in user can see the edit/delete buttons for a global event. bug only members of loco council can edit/delete a global event. "normal" users should not see theses buttons.

i think we need django-openid-0.2 and automatic lp-team<->django-groups mapping to fix this. is django-openid-0.2 installed on the loco.ubuntu.com server?

Related branches

Revision history for this message
Thomas Bechtold (toabctl) wrote :
Revision history for this message
Michael Hall (mhall119) wrote :

I think we pull loco-council membership when the user logs in, so we may not need the lp-teams<->django-groups for this

Michael Hall (mhall119)
tags: added: events
Changed in loco-directory:
status: New → Confirmed
Michael Hall (mhall119)
tags: added: needs-decision
Michael Hall (mhall119)
Changed in loco-directory:
importance: Undecided → Medium
Revision history for this message
Daniel Holbach (dholbach) wrote :

What needs to be done here? We have django-openid 0.2 installed.

Changed in loco-directory:
status: Confirmed → Triaged
Changed in loco-directory:
status: Triaged → Incomplete
Michael Hall (mhall119)
Changed in loco-directory:
assignee: nobody → Michael Hall (mhall119)
status: Incomplete → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.