You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Current Behavior
A user is able to create a private discussion without being a recipient when he deletes himself in the initial recipient's selection.
Steps to Reproduce
Create a new PD
Remove own user from recipients
Post discission
Expected Behavior
The user is prevented from creating PDs that he is not part of.
Environment
Flarum version: 1.0.4
Extension version: 1.1.1
Possible solution(s)
Prevent user from removing himself/ display a warning when a user tries to delete himself that he's not able adding himself back again
Additional Context
Posts from discussion which user 6 created and invited users 2 and 4 while removing himself:
DB [flarum]> select id,user_id,type,content from posts where discussion_id = 123;
+-------+---------+--------------------+--------------------------------------------------------------------+
| id | user_id | type | content |
+-------+---------+--------------------+--------------------------------------------------------------------+
| 1234 | 6 | comment | <t><p>Content</p></t> |
| 1235 | 6 | recipientsModified | {"new":{"users":[2,4],"groups":[]},"old":{"users":[],"groups":[]}} |
+-------+---------+--------------------+--------------------------------------------------------------------+
The text was updated successfully, but these errors were encountered:
Thanks @PatrickRoethlisberger for your bug report. While your environment is very old compared to today, I'm still able to reproduce the issue today with version 1.3.6 of fof/byobu. This definitely needs to be fixed!
Bug Report
Current Behavior
A user is able to create a private discussion without being a recipient when he deletes himself in the initial recipient's selection.
Steps to Reproduce
Expected Behavior
The user is prevented from creating PDs that he is not part of.
Environment
Possible solution(s)
Prevent user from removing himself/ display a warning when a user tries to delete himself that he's not able adding himself back again
Additional Context
Posts from discussion which user 6 created and invited users 2 and 4 while removing himself:
The text was updated successfully, but these errors were encountered: