Menu

#343 users are creating series repeat bookings that bypass our booking restrictions

Major
open
nobody
None
9
2016-01-18
2016-01-16
Anonymous
No

It has come to our attention that some of our users are finding ways to book in advance more than our determined two week in advance booking cutoff. (we only want people to be able to book two weeks from current time in advance, and any request past that time is prohibited) However, other users of ours have brought it to our attention that others are somehow able to bypass this restriction by doing something with the repeat booking use.

My question is this: How are they able to do this? and how can we fix it?

Discussion

  • Campbell Morrison

    Which version of MRBS are you using? I know it's a silly question, but are you sure that the other users are not admins?

     
  • Anonymous

    Anonymous - 2016-01-16

    MRBS version 1.4.10. I believe that those making the bookings are not admins, I was told by the users that those bypassing the booking restrictions were playing around with the repaeat booking section when booking rooms, and that it then allowed them to book past the allowed two weeks in advance.

     

    Last edit: Anonymous 2016-01-16
  • Campbell Morrison

    Do you have more than one area? Do the other areas have different restrictions on booking?

     
  • Anonymous

    Anonymous - 2016-01-17

    just one building, with 15 rooms available for booking. All the rooms have the same two week restriction. I checked and it seems someone booked past the two weeks for four months. How could they have done this?

     
  • Campbell Morrison

    I don't know how this could happen. Are you able to reproduce the problem yourself? Is it possible to ask the person who made the booking how they did it? What kind of booking was it (eg daily/weekly/monthly repeat)? When was the booking start date? When was the booking last modified?

     
  • Campbell Morrison

    One other question - have you made any changes to standard MRBS?

     
  • Campbell Morrison

    I have been playing around with repeats trying to reproduce this problem and haven't yet managed to do so. (Admittedly I have been testing on the latest code in the default branch rather than MRBS 1.4.10, but I can't see anything in the revision history since 1.4.10 that would have fixed the bug).

    In the process of testing I have found a couple of other minor bugs related to repeats which I have now fixed (changesets 342f4bafa72b and 399fd6cc76c9), but I don't think either of these bugs is related to the one you are seeing.

     
MongoDB Logo MongoDB