You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
[HOLD - should be resolved by #23755][$500] [Distance] - User is able to request money from an archived workspace using link #27113
Users should not have the ability to request money from an archived workspace
Actual Result:
The User is able to request money from an archived workspace
Workaround:
Unknown
Platforms:
Which of our officially supported platforms is this issue occurring on?
Android / native
Android / Chrome
iOS / native
iOS / Safari
MacOS / Chrome / Safari
MacOS / Desktop
Version Number: 1.3.66.3 Reproducible in staging?: y Reproducible in production?: y If this was caught during regression testing, add the test name, ID and link from TestRail: Email or phone of affected tester (no customers): Logs:https://stackoverflow.com/c/expensify/questions/4856 Notes/Photos/Videos: Any additional supporting documentation
This is the condition to disable the Request button. We don't check if the policy is archive or not
What changes do you think we should make in order to solve the problem?
In MoneyRequestConfirmationList, we should add a condition to check if workspace is deleted. If that we should disable button and display a error message like this
To do that, in herehttps://github.com/Expensify/App/blob/911fe99c56116f1a36c38fb596251bbce5fc1b33/src/components/MoneyRequestConfirmationList.js#L361
we should update the condition like that
changed the title [-][Distance] - User is able to request money from an archived workspace using link[/-][+][$500] [Distance] - User is able to request money from an archived workspace using link[/+]on Sep 10, 2023
Activity
DylanDylann commentedon Sep 10, 2023
Proposal
Please re-state the problem that we are trying to solve in this issue.
[Distance] user is able to request money from an archived workspace using link
What is the root cause of that problem?
App/src/components/MoneyRequestConfirmationList.js
Line 361 in 911fe99
This is the condition to disable the Request button. We don't check if the policy is archive or not
What changes do you think we should make in order to solve the problem?
In MoneyRequestConfirmationList, we should add a condition to check if workspace is deleted. If that we should disable button and display a error message like this
To do that, in herehttps://github.com/Expensify/App/blob/911fe99c56116f1a36c38fb596251bbce5fc1b33/src/components/MoneyRequestConfirmationList.js#L361
we should update the condition like that
and in here,
App/src/components/MoneyRequestConfirmationList.js
Line 264 in 911fe99
add an error message
The completed code change will be implemented in the PR phrase
What alternative solutions did you explore? (Optional)
If the selected workspace is deleted, we will redirect to the distance request page. To do that,
App/src/pages/iou/steps/MoneyRequestConfirmPage.js
Line 75 in 911fe99
Add condition and logic to redirect to distance page
namhihi237 commentedon Sep 10, 2023
Proposal
Please re-state the problem that we are trying to solve in this issue.
[Distance] user is able to request money from an archived workspace using a deep link
What is the root cause of that problem?
We have logic to check some conditions to return to the money request page. Here we have not checked whether the workspace is archived or not.
App/src/pages/iou/steps/MoneyRequestConfirmPage.js
Lines 94 to 97 in f5fa30b
That's why we can open the confirm request page even though the WS has been deleted
What changes do you think we should make in order to solve the problem?
We can add a condition to check if the room is archived or not to leave the money request page.
What alternative solutions did you explore? (Optional)
In addition, if we do not want to return to the money request page, we can show not found page by grawp content with
FullPageNotFoundView[-][Distance] - User is able to request money from an archived workspace using link[/-][+][$500] [Distance] - User is able to request money from an archived workspace using link[/+]melvin-bot commentedon Sep 10, 2023
Job added to Upwork: https://www.upwork.com/jobs/~0144d881c5d2a1b34f
melvin-bot commentedon Sep 10, 2023
Triggered auto assignment to @johncschuster (
Bug), see https://stackoverflow.com/c/expensify/questions/14418 for more details.melvin-bot commentedon Sep 10, 2023
Bug0 Triage Checklist (Main S/O)
Platformsin OP are ✅)melvin-bot commentedon Sep 10, 2023
Triggered auto assignment to @garrettmknight (
External), see https://stackoverflow.com/c/expensify/questions/8582 for more details.melvin-bot commentedon Sep 10, 2023
Triggered auto assignment to Contributor-plus team member for initial proposal review - @mollfpr (
External)13 remaining items
garrettmknight commentedon Oct 25, 2023
Still holding on #23755
garrettmknight commentedon Oct 25, 2023
Moving daily to retest - there was a regression on the issue we were holding on so it still might be an issue.
melvin-bot commentedon Oct 31, 2023
@garrettmknight, @mollfpr Huh... This is 4 days overdue. Who can take care of this?
garrettmknight commentedon Oct 31, 2023
Haven't had a chance to retest today - will do tomorrow.
garrettmknight commentedon Nov 1, 2023
This has been fixed, once you reload the distance request you're required to select a new workspace.
@hichamcc accept the offer and I'll pay the reporting bonus.
Upwork job for my reference: https://www.upwork.com/en-gb/ab/applicants/1719789138652127232/hired
hichamcc commentedon Nov 1, 2023
Done
garrettmknight commentedon Nov 1, 2023
Paid, closing