You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
In the committees and meetings menus, the visibility of existing participants are not correctly regulated in the tool tips. Users which are part of a meeting and not admins in it can see the number of participants per meeting or per committee. This is incorrect. In the current status, these users can see the amount of participants on orga level, even if they don't have the permission to see the participant list in a meeting. This don't make sense. There should be a view limitation.
Additionally, the number of accounts in a committee is visible for these users in the committees listing.
Image 1:
Image 2:
Image 3:
How to Reproduce
Steps to reproduce the behavior:
Requirements: A committee with two meetings. A user as delegate in both meetings. The user also didn't have the permission to see the participant list in each meeting.
login as user A > open committees menu. Number of accounts per committee is visible. (Image 1 - case 1) > Open the committee detail view. you should see now both meetings with a hint about the user amount in the meeting. (image two - case 2)
open now the meeting list. same behavior here. the user can see the amount of participants in the meetings. (image three - case three)
Expected behavior
Case 1: The number of accounts per committee should only be visible for accounts who are allowed to see it. Only superadmins, organizationadmins, account admins and the committee admins of the committee should see this number.
Case 2: Accounts without the permission to see users in a meeting should not see the participant amount. However, this does not apply to admin accounts at organization level. Who can see this number: superadmins, orgaadmins, committee admins of the meeting, the meeting admin and users in the meeting with the group permission 'can see participants'.
Case 3: The number of accounts per meeting should only be visible for accounts who are allowed to see it. Who can see this number: superadmins, orgaadmins, committee admins of the meeting, the meeting admin and users in the meeting with the group permission 'can see participants'.
The text was updated successfully, but these errors were encountered:
In committee-list number of accounts per committee should only be visible for min account admins or committee managers of that committee.
In committee-detail number of participants per meeting should only be visible for min orga admins or committee managers of the committee of that meeting, or users in that meeting with the permission 'can see participants'
in meeting-list number of accounts should only be visible for min orga admins or committee managers of the committee of that meeting or users in the that meeting with the permission 'can see participants'.
Describe the bug
In the committees and meetings menus, the visibility of existing participants are not correctly regulated in the tool tips. Users which are part of a meeting and not admins in it can see the number of participants per meeting or per committee. This is incorrect. In the current status, these users can see the amount of participants on orga level, even if they don't have the permission to see the participant list in a meeting. This don't make sense. There should be a view limitation.
Additionally, the number of accounts in a committee is visible for these users in the committees listing.
Image 1:
Image 2:
Image 3:
How to Reproduce
Steps to reproduce the behavior:
Requirements: A committee with two meetings. A user as delegate in both meetings. The user also didn't have the permission to see the participant list in each meeting.
Expected behavior
Case 1: The number of accounts per committee should only be visible for accounts who are allowed to see it. Only superadmins, organizationadmins, account admins and the committee admins of the committee should see this number.
Case 2: Accounts without the permission to see users in a meeting should not see the participant amount. However, this does not apply to admin accounts at organization level. Who can see this number: superadmins, orgaadmins, committee admins of the meeting, the meeting admin and users in the meeting with the group permission 'can see participants'.
Case 3: The number of accounts per meeting should only be visible for accounts who are allowed to see it. Who can see this number: superadmins, orgaadmins, committee admins of the meeting, the meeting admin and users in the meeting with the group permission 'can see participants'.
The text was updated successfully, but these errors were encountered: