[$100] Check group role / rights

[jmgasper]

@atelomycterus - We're getting reports of folks who are not registered for a challenge able to access the challenge forum.

Can you investigate ASAP please?

Sample:

• https://www.topcoder.com/challenges/ac34bef7-a634-4d2f-b5e4-c83f68d908a5
• https://discussions.topcoder.com/categories/ac34bef7-a634-4d2f-b5e4-c83f68d908a5

Login:

CustomerUser/appirio123

[jmgasper]

Challenge https://www.topcoder.com/challenges/bfd2e64b-f65c-4a51-8ab9-d8b74ccd3d8e has been created for this ticket.

This is an automated message for ghostar via Topcoder X

[jmgasper]

Challenge https://www.topcoder.com/challenges/bfd2e64b-f65c-4a51-8ab9-d8b74ccd3d8e has been assigned to obog.

This is an automated message for ghostar via Topcoder X

[atelomycterus]

@jmgasper CustomerUser is a member of the group. The user joined TEST CHALLENGE FORUM RELEASE 1/22/2021 at 2021-01-22 06:45:23.

Go to 'All members' of the TEST CHALLENGE FORUM RELEASE 1/22/2021:

I would check some more users 'who are not registered for a challenge able to access the challenge forum'.
If they have joined groups but not registered by themselves for challenges then
have a look at challenge forum processor logs. What events have been received and so on.
Let me know if I can help with it.

[jmgasper]

@sdgun ☝️ Can you validate please?

[sdgun]

@atelomycterus This user unregisters from the challenges, but it doesn't remove him from the groups.

[atelomycterus]

@jmgasper I registered for a challenge (https://www.topcoder.com/challenges/c8395d32-970e-4c77-8c63-4969a29a031f) using my account and unregistered from it but I wasn't removed from a Vanilla group.

I see that challenge-forum-processor (master) doesn't include several commits after 21 Dec:

The user is not removed from a group due to a missing commit ( 780ca615008b76802bca2d5aab16c0cafaa9f347 commit from 25 December):

Several new methods were added in GroupAPI. I remember I changed a path due to PHP Runtime error in Vanilla. Need to follow Vanilla Controller API naming conventions. Sorry about that.

Let me know when the challenge forum processor is re-deployed. I'll validate it.

[jmgasper]

@atelomycterus - Ah, good catch, thanks. Fixing / redeploying now.

[sdgun]

Verified, unregistering removed the user from the group. Also verified email notifications after unregistering and user is not getting any notification after that. This issue can be closed @jmgasper

[atelomycterus]

@jmgasper It works as expected. I've tested with my account. After unregistering from a challenge, Permission Problem page is displayed.
@sdgun Please validate it. Let me know if you find something wrong.

[jmgasper]

Challenge https://www.topcoder.com/challenges/153518f7-acf8-4df3-a000-86771046d807 has been created for this ticket.

This is an automated message for ghostar via Topcoder X

[jmgasper]

Challenge https://www.topcoder.com/challenges/153518f7-acf8-4df3-a000-86771046d807 has been assigned to obog.

This is an automated message for ghostar via Topcoder X

[jmgasper]

Payment task has been updated: https://www.topcoder.com/challenges/153518f7-acf8-4df3-a000-86771046d807
Payments Complete
Winner: obog
Copilot: ghostar
Challenge 153518f7-acf8-4df3-a000-86771046d807 has been paid and closed.

This is an automated message for ghostar via Topcoder X