I've noticed that if a user attempts to create a group event, but doesn't complete all the required fields, the event form redirects to the non-group event form and not the group event form.
To recreate this bug in v0.8.1:
1. You add an event to a group calendar:
URL = /pg/event_calendar/new/?group_guid=n
2. Form is submitted with required fields incomplete:
"Error: There was an error in saving your event. Please make sure that you have provided the required fields."
3. User is directed back to the form, however the page layout has changed from a group event and the URL has changed:
URL = /action/event_calendar/manage
4. User completes the required field and save the form again, however the event is created as a site wide event. This happens even if the user is not normally permitted to create site wide events.
info@elgg.org
Security issues should be reported to security@elgg.org!
©2014 the Elgg Foundation
Elgg is a registered trademark of Thematic Networks.
Cover image by Raül Utrera is used under Creative Commons license.
Icons by Flaticon and FontAwesome.
- Kevin Jardine@kevin

Kevin Jardine - 0 likes
You must log in to post replies.Hi James,
Thanks for this very clear bug report. I can see the problem in the code and will include a fix in the next release (expected some time after Elgg 1.7 final is released).