Set up event with signups limit of 36.
Once the limit is reached, a notice is shown saying that the limit has been reached - expected behaviour.
Underneath this, the information of the first person registered is shown, along with a "Cancel Signup" form button. If the user (any and all users get this button) clicks this button, ALL signup information for this event is deleted - unexpected behaviour.
Surely it is not the correct behaviour for Anonymous users to DELETE all signup information for an event?
As far as I can tell, the "_signup_print_current_signup" function is called (signup.module, line 652), but I'm not sure why.
I'm pretty sure I have the access control correct. Anonymous users can only "sign up for content" - no other access is granted.
System is RedHat 9, Drupal 5.1, PHP Version 4.3.4, MySQL 4.0.18
Apologies in advance if I have this wrong.
Dave T
| Comment | File | Size | Author |
|---|---|---|---|
| #3 | signup_anon_no_cancel.patch_1.txt | 1.54 KB | dww |
| #2 | signup_anon_no_cancel.patch.txt | 1.55 KB | dww |
Comments
Comment #1
dwwOne thing that must be wrong is the version of this issue. The signup limit stuff was only added in 5.x-2.1. So, what version are you actually using?
Once that's cleared up, we can hopefully debug this.
Comment #2
dwwOk, I just tried this on a local test site and reproduced it. It's pretty clearly a bug that's only present in the 5.x-2.* series. See attached patch which fixes it (at least given my testing). If you could try this on your site and confirm it solves the problem, I'll commit the fix ASAP.
Comment #3
dwwWhoops, that patch included some debugging code. ;) Try this one instead.
Comment #4
teedave commentedDerek,
Thank you for this - it works fine on my test area, and I have just arranged for it to be rolled out to live. I will let you know the result later today.
Some day soon I hope to be able to contribute to this!
Cheers
Dave T
Comment #5
dwwCommitted to HEAD. The bug was new in 5.x-2.1, so there's no need to backport this to any other branch. It'll be fixed officially in the 5.x-2.2 release, which should probably be out relatively soon, or in the next 5.x-2.x-dev snapshot...
Comment #6
teedave commentedDerek,
It appears that there is still a problem in the live version.
It could be a result of some of the strange server settings e.g. register_globals is ON, and other such nonsense.
I have no control over the live server, unfortunately.
I'm happy to stick to the workaround I have been using.
Thanks again
Dave T
Comment #7
dwwTry clearing your Drupal cache. Anonymous users might still be getting a cache copy of the page that includes the form that lets them cancel.
Comment #8
teedave commentedGood call, but no cigar. I'll get to the bottom of it when I have a chance to look into it, and let you know what I find out.
Cheers
Comment #9
(not verified) commentedComment #10
dwwDrat, teedave never marked this active after reporting that he didn't think it was fixed, so it was autoclosed. Now, someone reported a duplicate: http://drupal.org/node/192825. Perhaps the debugging from #192825 is relevant and someone can roll a patch here.
Comment #11
dwwNo... I think you're all confused. ;) I just tried again to reproduce this with both the 5.x-2.2 code, and the latest 5.x-2.x-dev code, and I can't trigger the bug. The code that Faye posted over at #192825 is clearly not from 5.x-2.2, either. Looking at the current code, I see no possible way to print out the form that allows you to cancel your signup if you're anonymous. I'm convinced that the only reports about this bug are from 5.x-2.1 or earlier code.
@teedave: unless you can provide details on how to reproduce this with the official 5.x-2.2 code, I'm going to call it fixed again...
Comment #12
(not verified) commentedAutomatically closed -- issue fixed for two weeks with no activity.