You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Aug 18, 2024. It is now read-only.
The Bug:
When site administrator adds a user to a group (ours are invite only) using the widget on the user's profile page, the user's state is set to pending instead of active.
Context:
Version: og 7.x-2.9
Likely caused by security update of og 2.9 in file "OgBehaviorHandler.class.php" on line 127 located in og/plugins/entityreference/behavior/ possibly because membership state provided by the widget is empty.
What's the best fix for this: Make the widget provide user's state? Or check if actor has administer group permission and set state to active if they do?
Culprit Code:
// Prepare an array with the membership state, if it was provided in the widget.
...
// Must provide correct state in the event that approval is required.
if (empty($item['state']) && $entity_type == 'user' && !og_user_access($group_type, $gid, 'subscribe without approval', $entity)) {
$item['state'] = OG_STATE_PENDING;
}...
Slow Work around:
Site administrator must add user to groups one by one from each group's add user page so that user's states are correctly set to active.
The text was updated successfully, but these errors were encountered:
The Bug:
When site administrator adds a user to a group (ours are invite only) using the widget on the user's profile page, the user's state is set to pending instead of active.
Context:
Culprit Code:
Slow Work around:
Site administrator must add user to groups one by one from each group's add user page so that user's states are correctly set to active.
The text was updated successfully, but these errors were encountered: