mahara-contributors team mailing list archive

[Sean Brennan <503598@xxxxxxxxxxxxxxxxxx>]

I have revised this patch as to the suggestions.


** Patch added: "0001-lang-lib-user-user-sendmessage-reply-to-leads-to-acc.patch"
   https://bugs.launchpad.net/mahara/+bug/503598/+attachment/1864919/+files/0001-lang-lib-user-user-sendmessage-reply-to-leads-to-acc.patch

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
https://bugs.launchpad.net/bugs/503598

Title:
  reply to messages from deleted users lead to "access denied" page

Status in Mahara ePortfolio:
  Confirmed

Bug description:
  Username: crimson

  I received this email from a spam message:

  You have been sent a notification from Mahara ePortfolio System. Message
  follows:
  ------------------------------------------------------------------------

  Subject: New message from nancy wilson

  nancy wilson has sent you a message.  To view this message, visit

  http://mahara.org/user/sendmessage.php?id=6530&replyto=879010

  ...

  The issue is that link doesn't work - it gives me access denied:

  "Access Denied
  You do not have access to view this page

  You cannot send this user a message"

  
  Also, navigating to http://mahara.org/account/activity/ then clicking on "New message from nancy wilson" then "More...' (same link as above) gives the same issue.