Report a Bug
#BugReportDecidim Let's test Decidim and report bugs together
Assemby admins must not be allowed to send newsletters platform-wide
As a platform admin, I can send newsletters explicitly to all registered participants who wish to receive newsletters with the option "send to all users". As an assembly admin I do not have the checkbox "send to all users", but the newsletter would still be sent to all if I do not explicitly set a restriction using the "send to participants" or "send to followers" option. In my opinion it shouldn't be possible for assembly admins to send newsletters without restricting the recipients. I guess the same behaviour is true for process admins without platform admin rights.
We're using Decidim v0.24.x. I haven't found any bug-fixes or features in later versions which address this problem.
List of Endorsements
Report inappropriate content
Is this content inappropriate?
Comment details
You are seeing a single comment
View all comments
Conversation with Andrés
Hi @innosmith!
It shouldn't work and I couldn´t reproduce this in v0.27.0.dev.
I see that we have a validation for this case and it actually works:
https://user-images.githubusercontent.com/717367/158786482-e2a8c476-548c-492f-b0c7-8132a5b6a023.png
Doing a bit of detective work I found a bug that fixed what you describe. This should be fixed in v0.24 already though:
https://github.com/decidim/decidim/pull/6875
Maybe can you upgrade to v0.25 (or even better, v0.26) so you can check it again? Thanks
Hi @andres
Nice to meet you and thank you for looking at our issue. We're still running v0.24 but upgrading to v0.25 and then v0.26 in the next weeks. I'll re-test the behaviour with v0.26 and document my results in this ticket.
Best regards, Anthony
Hi @andres
We've upgraded to v0.26.1 and still have the problem that process and assembly admins can send newsletters to all registered participants who have signed up for newsletters, as described above. The system still lets them click "send newsletter" without choosing a recipient group. The send button is enabled and the number of recipients at the bottom tells a user, that the newsletter will be sent to anyone. Could you please re-check if this has been fixed in v0.27 but not yet in v0.26? If not, any other idea how to reproduce? Maybe I can send you some screenshots by email to show you how it looks to us. Thank you very much.
Loading comments ...