HELP ! pb with registrants part

Hi,

My website let people create their own event.
When a "Registered" user creates an event I assign him a new group: "ORG" group (a new user group I have created) .

When users from ORG group logged into the website they have special access from the main menu.
For example, they can edit their own Events (using this link: index.php?option=com_eventbooking&view=events) , this works perfectly because they only see the events they have created, not others.

My problem is about Registrants!
I also give creators an access from the main menu to the Registrants ( using this link: index.php?option=com_eventbooking&view=registrants ), but this time they are able to see all the registrants from all the events, their own events of course but events created from other people !!! that is a BIG security probleme for me.

How can I let creators access only to the registrants management from their own events ?

thx for your precious reply !!!!!!

Z.

Hi

As replied via support ticket, you just need to change one line of code to change this behavior :

1. Open the file components/com_eventbooking/eventbooking.php

2. Find the code below :

3. Change ti to :

After that, it will work as expected.

Regards,

Tuan

Hi Tuan,

I still have nearly the same pb with the new Ebooking ...but the solution you gave me is not possible anymore

How can I let creators access only to the management options from their own events and not all the events ?Actually when a creator goes to an event page he is able to unpublished or modify it even if he s not the creator of this event. that is a pb for me.

thx for your help.