Open-event-server: User with organizer or coorganizer role can delete other roles too
Describe the bug
Currently, a user with coorganizer access to an event can delete other organizers/coorganizers/owners too. But the user should be allowed to delete users with roles smaller than the user itself.
Expected behavior
User should be able to delete another user (having a role in the event), only if the user
Additional context
On it
shreyanshdwivedi
All 2 comments
But the user should be allowed to delete users with roles smaller than the user itself.
In my opinion, either only owner should have the access to create/delete roles or only owner and organizers should have that access, with organizers being allowed to create/delete roles except that of owner.
ShridharGoel
on 8 Jul 2019
So, only users with organizer access can create role-invites. The only problem lies with the delete function. Creating a PR for it
shreyanshdwivedi
on 14 Jul 2019
Related issues
shubham-padia
路
4Comments
rafalkowalski
路
3Comments
SaptakS
路
3Comments
dr0pdb
路
4Comments
aditya1702
路
4Comments
Most helpful comment
In my opinion, either only owner should have the access to create/delete roles or only owner and organizers should have that access, with organizers being allowed to create/delete roles except that of owner.