summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMagnus Hagander2025-05-21 16:05:11 +0000
committerMagnus Hagander2025-05-21 16:05:11 +0000
commitc70a0a5893c943e95333b39324b8068a865bfb91 (patch)
treed594d0d8c8ffdfb099e80d08d9b9470665d9fdc4
parent824c76980602fbfe74242df921517de351accbd4 (diff)
Use secret based link to sponsor-vouchers invoice on dashboard
There can be multiple managers of a sponsorship, so for all of them to be able to view (and pay) the invoice, we need to use the secret-url link rather tha th eone expecting the user to be the same one as the one who created it. Spotted by Cornelia Biacsics
-rw-r--r--template/confsponsor/sponsor.html2
1 files changed, 1 insertions, 1 deletions
diff --git a/template/confsponsor/sponsor.html b/template/confsponsor/sponsor.html
index fd81d3e3..9f11f934 100644
--- a/template/confsponsor/sponsor.html
+++ b/template/confsponsor/sponsor.html
@@ -258,7 +258,7 @@ this page.
</p>
<ul>
{%for v in pendingvouchers%}
- <li>Invoice #<a href="/invoices/{{v.invoice.id}}/">{{v.invoice.id}}</a></li>
+ <li>Invoice #<a href="/invoices/{{v.invoice.id}}/{{v.invoice.recipient_secret}}/">{{v.invoice.id}}</a></li>
{%endfor%}
</ul>
{%endif%}