Details
-
Bug
-
Status: Closed (View Workflow)
-
Resolution: Fixed
-
3.0.4
-
None
-
PHP Environment: 5.2.5
Database: MySQL 4.1.22
Description
If I set user or group forum permission for "Can vote in polls" to "Never", then users are still able to vote in polls if the users are allowed to re-vote, even if they haven't voted to the poll yet.
As an example, for Registered users I set the forum permission for "Can vote in polls" to "Never". Check the attachment (trace_can-vote-in-polls.png) to see the trace. As you can see, I should not be able to vote in polls in that forum. However, I can still vote in that forum.
I have figured out how this is possible. It's because "Allow re-voting" in the poll-post is set to enabled, while the permission "Can change existing vote" is set to "Yes". However, I have not voted to the poll yet.
If "Allow re-voting" is not set to enabled and/or the permission "Can change existing vote" is set to "No/Never", then I can't vote.
This seems odd to me. If I set a forum permission for "Can vote in polls" to "Never", then I expect not being able to vote; with the exception perhaps if the permission "Can change existing vote" is set to "Yes", "Allow re-voting" is set to enabled, and there is already an existing vote.