Type: Feature Request
Affects Version/s: 2.0.2 CE GA1
Fix Version/s: None
Environment:Tomcat 7.0.25 + MySQL 5. 6.1.10 EE GA1. 6.1.x Plugins GIT ID: 097dba7158b4c9e4d49b0962b41a5418585fa041.
Similar Issues:Show 5 results
SOS-1052 An event with no guest permission is view-able in the Event portlet SOS-112 Fix padding of calendar events; Theme calendar navigation in more detail SOS-260 Calendar issue when editing events SOS-825 Power Users cannot confirm connection SOS-189 Display the day's upcoming calendar events for users.
A regular user is able to view a connections' personal calendar event under Activities but when clicking on the link to the Calendar event, the user is taken to an error page. This is due to the fact that a regular user doesn't have permission to access a connections' dashboard page where the event is located. If the regular user does not have permission to access the event's details, a link to the event under activities should not be visible.
Here are the steps to reproduce the original issue:
1. Add a regular Social Office user named User 1
2. Add another regular Social Office user named User 2
3. Sign out
4. Sign in as User 1
5. Add User 2 as a connection
6. Sign out as User 1
7. Sign in as User 2
8. Confirm the connection with User 1
9. Sign out as User 2
10. Sign in as User 1
11. Go to dashboard
12. Add a new page
13. Add a Calendar portlet
14. Add an event
15. Sign out as User 1
16. Sign in as User 2
17. Go to dashboard
18. Under Activities, click on the new event created by User 1
19. The user is taken to an error page.