Skip to content

Restrict changing registration to users with change registration perms

Ghost User requested to merge fix/registrations-api-without-right-permissions into master

Closes #825

Previous behaviour

Steps to reproduce:

  1. Create a user without registration change permission but with event change permission
  2. Edit a registration of an event organised by a member group that the member is in
  3. Works

New behaviour

Steps to validate that it works:

  1. Create a user without registration change permission but with event change permission
  2. Edit a registration of an event organised by a member group that the member is in
  3. Does not work

Merge request reports