Send Text Msg / Fix It, Allows Member Info Update without the Privilege

TroopTrack Bugs
1

“Send a Text Message”, then click on “Fix It” allows a user without Manage Troop Members privilege to change Phone Numbers, Provider, Opt-out option of other members.

Users without the Manage Troop Members privilege should not be able to update this information, but rather be restricted to read-only access to the Fix It screen.

2

They will only see the members they have access too. If they have Self Privilege then they will only see themselves. If they have Household then everyone in their household. Then Patrol/Den, or Unit. I am not against the idea that it be limited based on a different privilege but they won’t just see everyone unless they have Unit (BSA, or top level depending on the type of unit you are).

3

I acknowledge that they can only see/modify members they have access to. But, for example a Patrol Leader who has access at Patrol/Den level should not be able to change/add phone numbers of other patrol members or opt them in or out of text messaging unless that Patrol Leader has been granted the privilege to Manage Troop Members.

I do think they should be able see the Fix It screen so they know who will/won’t receive their text message.

4

Hi @jjeffery,

I do see that this is an issue, and I’m getting it over to our tech team so they can have the editing of the phone list be put under a privilege.

Thanks,

David Keener
TroopTrack

5

Hi @AaronStorey, @jjeffery,

We’ve put the editing the text message list under the manage members privilege, so anyone who is able to assist in managing members can also edit the text message list.

Thanks,

David Keener
TroopTrack

1 Like