Ticket PDF should exist for each attendee

[iamareebjamal]

Ticket PDF is currently associated with an order which should instead be associated with an attendee as each attendee should have a ticket

[codedsun]

Taking this up!

[codedsun]

@iamareebjamal - The ticket holder table has the column pdf_url which holds the value of the Ticket PDF. Can you explain me more here?

[iamareebjamal]

There is a single endpoint to download tickets for an order -

open-event-server/app/api/custom/orders.py

Lines 35 to 38 in 47eb8e2

	@ticket_blueprint.route('/<string:order_identifier>')
	@order_blueprint.route('/<string:order_identifier>/tickets-pdf')
	@jwt_required
	def ticket_attendee_authorized(order_identifier):

This means I cannot download it for individual attendees

[mariobehling]

To clarify: Feature-wise we need both a) a way to download all tickets in an order in one PDF and b) a way to download each ticket and share access of different tickets within an order with the (intended) ticket holder.

Who has access to tickets?

1. The account/person who has made the order has access to all tickets of an order.
2. Different tickets within an order can be bought for different people. Each person has their own email address (and possibly existing account on the system, e.g. eventyay). So, each person should have access to the ticket(s) associated with their email address, but they should not have access to other tickets within the same order.

[mariobehling]

Other questions that need to be handled in subsequent issues (this is getting rather complex permission-wise):

• Who has access to the order invoice? -> Only the person ordering the tickets has access. Other people should be able to see the button "invoice" on their complete ticket/order page, but when they click on it (coming from the "My Tickets" page), they should see a message "Only the account that made the order is able to access this invoice."
• If a user has access to their tickets, they should not be able to see the list of all other tickets that are within that order, if they are not the account that made the order (the owner of the order). In that case show a message, e.g. with a star at the bottom of the table and within the box - something like *Only the person or account that made the order is able to see all tickets in this order.