jethro-pmm icon indicating copy to clipboard operation
jethro-pmm copied to clipboard

Restricted users editing roster can erroneously delete assignments??

Open tbar0970 opened this issue 2 years ago • 1 comments

I think: If persons A B C D are assigned to roster role R on a certain date and user X is restricted so they can only see persons A and B then user X edits the roster assignments, makes changes for some other dates, and saves then afterwards, C and D are the only ones left assigned to the role (you would expect the opposite might be true).

There is already some logic about stopping restricted users from clobbering rosters, but it seems not to be covering this scenario correctly. Possibly the logic should be: If a user has been granted access to edit rosters, they should be able to see everyone assigned to a roster, even if that person would normally be invisible to them.

tbar0970 avatar Apr 13 '22 01:04 tbar0970

Would love somebody else to test this and verify/deny

tbar0970 avatar Jun 29 '22 09:06 tbar0970