This is a bit of an edge case, but people can see edit pages for events they don't have access to if they go to the edit page without logging in then log in and get redirected at the prompt to do so. They still can't edit the event, but they can see the edit page. STR: Don't be logged in, or log out. Go directly to edit page of an event you don't have access to, e.g. http://localhost:1981/edit/7 then log in when asked to. You will be shown the event edit page. It should instead show the normal 'Your account does not have permission to edit this event' error.
Attachment #8491027 - Flags: review?(gavin)
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.