Sorry if I am repeating some existing issue. I tried searching, but I can't find exactly what I need.
The page http://help.sander.su/myuserpoints/NUMBER
Who should be able to access it?
I thought that anybody with USERPOINTS_PERM_VIEW permission.
But currenty it's not like that - one needs USERPOINTS_PERM_ADMIN:
I am using the latest dev.

function userpoints_list_my_userpoints() {
  $overall_total = 0;
  $unapproved_total = 0;
  $approved_total = 0;

  global $user;

  // User which are displaying points for
  $uid = (int)arg(1);
  if ($uid) {
    if ($uid != $user->uid && !user_access(USERPOINTS_PERM_ADMIN)) {
      // If not the same as logged in user
      drupal_access_denied();
      return;
    }
  }
...
...
}


Comments

berdir’s picture

Status: Active » Closed (works as designed)

Yes, that is correct.

The view permission allows to view the amount of points another user has but not the exact transactions.

So I am closing this *bug report* as works as designed, but...

- Feel free to open a feature request for an additional permission that would allow to view transactions of other users
- The D7 version has fine-grained add/edit/moderate permissions, users with edit permission are allowed to view transactions too.

quotesbro’s picture

Category: bug » support
Status: Closed (works as designed) » Active

> The view permission allows to view the amount of points another user
As I see, users with view permission can't view the amount of other users' points in their profiles.
I'm telling about /user/$uid pages, not /myuserpoints/$uid.

berdir’s picture

Category: support » bug
Status: Active » Closed (works as designed)

Then this issue is unrelated to that, I suggest you create a new support request, it gets confusing otherwise :)

I'm rather sure that it works, but I'll check again.