Author Topic: [1.6.2] E-mail sent before permissions are checked (when creating event)?  (Read 2109 times)

etset

  • Freshman
  • *
  • Posts: 10
    • View Profile
A user tried to add an event in a workspace in which he has no permission to do so.

When he tried to submit the event (after configuring it: selecting subscribers, invited people, etc), he got the "no permissions" dialog box (or at least I think he did: I wasn't there at the time, but his description seems to match). At the same time I (and the other invited/subscribed people) got e-mails saying that a new event had been created.

He tried 4 times, so we all received 4 e-mails (with different, sequential, Unique Ids), but no event appeared since he didn't have permisisons.

Can it be that the e-mails (announcing a new event) are being sent before the user permisisons (to add the event) are checked?

Also, it might be worth checking if the code is behaving like this for other objects (notes, contacts, etc...), this could be a "general" issue, not specific to events.