jethro-pmm
jethro-pmm copied to clipboard
Restricted users editing roster can erroneously delete assignments??
I think: If persons A B C D are assigned to roster role R on a certain date and user X is restricted so they can only see persons A and B then user X edits the roster assignments, makes changes for some other dates, and saves then afterwards, C and D are the only ones left assigned to the role (you would expect the opposite might be true).
There is already some logic about stopping restricted users from clobbering rosters, but it seems not to be covering this scenario correctly. Possibly the logic should be: If a user has been granted access to edit rosters, they should be able to see everyone assigned to a roster, even if that person would normally be invisible to them.
Would love somebody else to test this and verify/deny