Invalid invite fields when creating invite as a moderator

Bug
,
1

Hi,

When creating a new invite via [..site..]/new-invite as a moderator, it allows for the invite to add the invitee to a group. Despite this not allowing the moderator to do so (returning a 403), the drop down box still is available. See below:

617×663 25.4 KB

Nothing exploitable, so probably UX than bug(?)

Merry Christmas :santa:

2 Likes
2

Any errors in the console or in /logs?

3

Yes, as this is unintended behaviour. So submitting a request to somewhere without enough access throws an error.

1 Like
5

The drop-down should probably only show for any admin or group owner.

(Non admin group owners should probably only be able to select a group that they own).

1 Like