Bugs
Complete

Back to Rings link on ring detail page leads to permission error for non-host/owner members

## Bug On the ring detail page (`/organizations/{slug}/groups/{groupSlug}`), the "Back to Rings" link navigates to `/organizations/{slug}/groups` — the **groups management page**. This page has an owner/host permission check and shows a "not authorized" error to regular org members. ## Steps to reproduce 1. User A creates an org with open join policy 2. User A creates a ring 3. User B joins the org (becomes a regular member) 4. User B navigates to the ring detail page (e.g., from the org public profile Rings section) 5. User B clicks "Back to Rings" 6. User B sees "You do not have permission to manage rings" error ## Expected The "Back to Rings" link should either: - Navigate to the org public profile page (Rings section) which is accessible to all members - OR the groups management page should show a read-only view of rings for non-admin members ## Root cause In `GroupDetailPage.tsx`, the back link is hardcoded to `/organizations/{slug}/groups`: ```tsx <Link href={`/organizations/${orgSlug}/groups`}>Back to Rings</Link> ``` But `OrgGroupsManagementPage.tsx` checks: ```tsx if (role !== OrgRole.Owner && role !== OrgRole.Host) { return <p>Not authorized</p>; } ``` ## Impact Regular org members who browse rings via the org public profile get stuck on the ring detail page — the only navigation back leads to a permission error.

0 Comments

Sign in to comment

No comments yet. Be the first to share your thoughts!