mirror of
https://gh.wpcy.net/https://github.com/discourse/discourse.git
synced 2026-05-06 18:12:46 +08:00
26e689ff8c
Previously, `can_act_on_invitee?` only allowed staff or the invitee themselves to update/remove an RSVP. This meant event creators and organizers (e.g. group facilitators with category moderator permissions) could not manage their own event's attendee list — only global moderators or admins could. This updates the guardian check to also allow users who `can_act_on_discourse_post_event?` (i.e. users in the allowed event groups who can edit the event post) to act on invitees. The redundant `staff?` check is removed since `can_act_on_discourse_post_event?` already checks for staff. https://meta.discourse.org/t/335780 |
||
|---|---|---|
| .. | ||
| action | ||
| chat_channel_sync_spec.rb | ||
| create_invitee_spec.rb | ||
| destroy_invitee_spec.rb | ||
| update_invitee_spec.rb | ||
