Skip to content

Commit c70a0a5

Browse files
committed
Use secret based link to sponsor-vouchers invoice on dashboard
There can be multiple managers of a sponsorship, so for all of them to be able to view (and pay) the invoice, we need to use the secret-url link rather tha th eone expecting the user to be the same one as the one who created it. Spotted by Cornelia Biacsics
1 parent 824c769 commit c70a0a5

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

template/confsponsor/sponsor.html

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -258,7 +258,7 @@ <h3>Pending vouchers</h3>
258258
</p>
259259
<ul>
260260
{%for v in pendingvouchers%}
261-
<li>Invoice #<a href="/invoices/{{v.invoice.id}}/">{{v.invoice.id}}</a></li>
261+
<li>Invoice #<a href="/invoices/{{v.invoice.id}}/{{v.invoice.recipient_secret}}/">{{v.invoice.id}}</a></li>
262262
{%endfor%}
263263
</ul>
264264
{%endif%}

0 commit comments

Comments
 (0)