Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • concrexit concrexit
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 70
    • Issues 70
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 10
    • Merge requests 10
  • Deployments
    • Deployments
    • Releases
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • Repository
  • Activity
  • Graph
  • Create a new issue
  • Commits
  • Issue Boards
Collapse sidebar
  • thaliathalia
  • concrexitconcrexit
  • Issues
  • #872
Closed
Open
Issue created May 13, 2019 by Sébastiaan Versteeg@sversteegOwner

Pizza orders reachable for people not in the organising member group

One-sentence description

Pizza orders reachable for people not in the organising member group

Current behaviour / Reproducing the bug

  1. Make a pizza event and add some orders
  2. Your user should not be a superuser
  3. Try to mark the orders as paid in the frontend
  4. Clicking doesn't do anything

Expected behaviour

  1. Make a pizza event and add some orders
  2. Your user should not be a superuser
  3. Try to mark the orders as paid in the frontend
  4. The orders page is permission denied
Edited Aug 04, 2019 by Sébastiaan Versteeg
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
Time tracking