mahara-contributors team mailing list archive

[Richard Mansfield <503598@xxxxxxxxxxxxxxxxxx>]

Sean,

That patch isn't quite right.  If you look at where the string
'cantmessageuser' is used, you'll see that the same string gets
displayed when you can't send a message to a user for any reason.

The user might still exist, but may have set their message preference on
the settings page to turn all messages off or to only allow messages
from friends.

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
https://bugs.launchpad.net/bugs/503598

Title:
  reply to messages from deleted users lead to "access denied" page

Status in Mahara ePortfolio:
  Confirmed

Bug description:
  Username: crimson

  I received this email from a spam message:

  You have been sent a notification from Mahara ePortfolio System. Message
  follows:
  ------------------------------------------------------------------------

  Subject: New message from nancy wilson

  nancy wilson has sent you a message.  To view this message, visit

  http://mahara.org/user/sendmessage.php?id=6530&replyto=879010

  ...

  The issue is that link doesn't work - it gives me access denied:

  "Access Denied
  You do not have access to view this page

  You cannot send this user a message"

  
  Also, navigating to http://mahara.org/account/activity/ then clicking on "New message from nancy wilson" then "More...' (same link as above) gives the same issue.