- - + +

<%= gettext "We're sorry, but something went wrong on our end." %>

From c296381ed632f43042e617d5123e00229cb38f58 Mon Sep 17 00:00:00 2001 From: Thomas Citharel Date: Fri, 9 Oct 2020 18:12:35 +0200 Subject: [PATCH 5/7] [Security] Fix events being editable by other users that organizers Closes #385 Signed-off-by: Thomas Citharel --- js/src/types/event.model.ts | 2 +- js/src/views/Event/Edit.vue | 22 ++++++--- lib/graphql/resolvers/event.ex | 15 ++++-- test/graphql/resolvers/event_test.exs | 68 ++++++++++++++++++++++++++- 4 files changed, 94 insertions(+), 13 deletions(-) diff --git a/js/src/types/event.model.ts b/js/src/types/event.model.ts index d357c5d3a..2d34844c5 100644 --- a/js/src/types/event.model.ts +++ b/js/src/types/event.model.ts @@ -275,7 +275,7 @@ export class EventModel implements IEvent { this.title = hash.title; this.slug = hash.slug; - this.description = hash.description; + this.description = hash.description || ""; this.beginsOn = new Date(hash.beginsOn); if (hash.endsOn) this.endsOn = new Date(hash.endsOn); diff --git a/js/src/views/Event/Edit.vue b/js/src/views/Event/Edit.vue index 2ad2d6f80..06e38968a 100644 --- a/js/src/views/Event/Edit.vue +++ b/js/src/views/Event/Edit.vue @@ -1,6 +1,6 @@