Invalid invite fields when creating invite as a moderator

Bug
,
1

Hi,

When creating a new invite via [..site..]/new-invite as a moderator, it allows for the invite to add the invitee to a group. Despite this not allowing the moderator to do so (returning a 403), the drop down box still is available. See below:

617Ă—663 25.4 KB

Nothing exploitable, so probably UX than bug(?)

Merry Christmas :santa:

Error message:
An error occurred: You are not permitted to view the requested resource.

2 Likes
2

Any errors in the console or in /logs?

3

Yes, as this is unintended behaviour. So submitting a request to somewhere without enough access throws an error.

1 Like
5

The drop-down should probably only show for any admin or group owner.

(Non admin group owners should probably only be able to select a group that they own).

1 Like
7

Instead of hiding the drop-down box from a moderator who is not an owner of any group, would it be possible to show the drop-down box with only a message of “You are not the owner of any groups”?

Such a message would give the moderator and their admin a better grasp of how to populate the field so that the moderator can accomplish their task of inviting a user while adding the user to a group.

1 Like