Event attendees csv export requires the “manage_options” capability

  • Resolved raymondtinyfrog

    (@raymondtinyfrog)


    2 months ago

    We have several users set up with a “conference managers” role and need them to be able to export the attendee csv but we’ve found that the export is requiring the users to have the “manage_options” capability which would give those users the ability to change permalink settings and generals settings like the admin email and such so we do not want to enable that capability for the “conference managers”.

    https://www.ads-software.com/documentation/article/roles-and-capabilities/#manage_options

    The code that checks the capability before doing the export is in the maybe_generate_csv function in the /event-tickets/src/Tribe/Attendees.php file around line 769.

    I did also find a similar function with the same name of maybe_generate_csv in the /event-tickets/src/Tickets/Commerce/Reports/Attendees.php file around line 393 and that function only requires the user to have the “edit_posts” capability which seems much more reasonable to require for the export.

    Is it possible that the “manage_options” capability was set as the requirement by mistake in the /event-tickets/src/Tribe/Attendees.php file? It doesn’t seem like the functionality provided by the “manage_options” capability makes sense as a requirement for the export.

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Support tristan083

    (@tristan083)

    Hi @raymondtinyfrog ,

    Thank you for bringing this to our attention.

    Our developers are aware of this issue and are working on a fix. I have added this thread to the internal bug report so this thread gets updated once the fix is released.

    Internal Bug Ticket Reference: TECTRIA-341

    Plugin Support Darian

    (@d0153)

    Hi @raymondtinyfrog

    We prioritize bugs by taking into consideration the number of users impacted as well as how the bug impacts one’s ability to run an event/sell tickets. I don’t have a specific timeline as to when this issue will be resolved, but trust that our team is aware. Our team communicates updates and bug fixes in our newsletter and via our changelog.

    I’m happy to help if any other questions are coming up around this topic, otherwise I’ll go ahead and close this ticket.

Viewing 2 replies - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.