"Enter manually" authors option not working when submitting an abstract

Administrators
1

Hi!

I have noticed that when I am sending an Abstract Invitations and someone fills it in, when trying to add authors, if they choose the option “Enter manually” for adding someone without an account and start typing an email they immediately get an “Access Denied” error, when Indico is intended to do a check if the email address is already present in the respective event.

This prompt works just fine with an admin account, but with a normal user account it seems the endpoint /event/1/abstracts/10/check-person-email returns a 403 and I am not sure how to stop this from happening and let submitters add unregistered co-authors.

If it is any relevant, ALLOW_PUBLIC_USER_SEARCH is set to True

Does anyone have any idea what to do or why this happens?

2

Indeed, this is a bug that happens only if you are logged in with an Indico account, and do not have management access to the event.

There are two easy workarounds:

  • ignore the error, potentially copy&paste the email so it does not pop up very frequently
  • logout before submitting the invited abstract - when logged out this request is never sent
3

It also seems to happen only if the invited abstract is NOT associated with the currently logged-in user. Can you confirm that this is the case for you?

4

This PR should fix it:

5

To me it happens both when the logged-in user is the same as the one intended to be the submitter from the invite and when a different user accesses the link.

6

do you have a publicly open CfA or is it closed?

7

It was publicly open but now it’s due and closed. The scenario I was using invites for was allowing some late submissions actually, which is when I noticed the bug.

8

Yes, then the bug probably happens for everyone.

PS: There is a separate ACL where you can authorize people to submit late. This is probably better than using invitations to let people submit after the deadline.