You can book 1billion tickets for a gig

[MyrtoG]

Version

v3

Severity

High

Suggested Priority

High

Observed Behaviour

I initially created multiple users to check if I could "overbook" a gig. I booked 1000 tickets for Phantogram with user1 and another 1000 tickets for the same gig with user2's account. I repeated that with another 6 users and was able to book at least 15000 tickets for the same gig. I then tried big numbers to book another concert and I was able to book up to 1 billion tickets for Portishead from one single user's account. I don't need to point out the implications that would arise should the app wasw released without taking into consideration the capacity of a venue and the amount of tickets available for sale.

Expected Behaviour

1. A single user should be able to book a limited amount of ticket. First of all the capacity of the venue should be taken into consideration and on top of that a user shouldn't be able to book all the tickets available to allow for other users to have access to the tickets. Maybe if someone wanted to book a large amount should make a request to book for a group(?)
2. When a user books an x amount of tickets, that x amount should automatically be deleted from the available tickets "pool" so that another user wouldn't be able to book the same tickets.
3. Venues usually have different options for tickets depending on whether you're seated or not, how close you are to the stage etc. The user should be able to choose from the above options. Maybe a picture of the seating plan of the venue showing which seats are available(?)

Reproduction Steps

1. Create at least 2 users
2. Log in as user1
3. Navigate to /gigs
4. Choose a gig by pressing the "more details and booking" link
5. Try to book 1 billion tickets
6. Log out
7. Log in as user2
8. Repeat steps 3 and 4 (make sure you choose the same gig)
9. Book another 1 billion tickets

[PaulNGilson]

We've asked, but haven't had any guidance from the customer on gig/venue limits. The possibility of online gigs comes to mind, but even then, a billion is probably a stretch :)

Definitely valid, but something we might not be getting deeper into in this short timescale.