Drafts events currently can be 1. Searched by URL without login and is visible 2. Anon login can submit results ;which shouldn't happen 3. Draft events shouldn't be visible to anyone by the admin and the creator -- should give 403 or 404 when someone else tries to access it
Anon login can submit results ;which shouldn't happen
The question is whether anyone should be able to submit results to a draft. I don't think it's useful to distinguish anon and auth users for drafts, the policy should be the same. A related discussion for published events is here: https://pagure.io/fedora-qa/testdays-web/issue/43
Draft events shouldn't be visible to anyone by the admin and the creator
It sound logical at first, but I wonder whether it's an actual problem. If you start creating a document on wiki, it's also publicly visible the whole time. We work in the open, this really might not be an issue. Quite the opposite, it might be very helpful to be able to show draft to a team that we're collaborating with on that test day. We just need to make sure people don't confuse it with a published event. So there should be a big visible warning saying that this is just a draft, and results shouldn't be accepted yet, that would sound OK to me. Then we don't need to hide drafts.
Searched by URL without login and is visible
With the above, this is no longer an issue.
Created a ticket for draft event banner: https://pagure.io/fedora-qa/testdays-web/issue/56
I think this is now covered, closing.
Metadata Update from @kparal: - Issue close_status updated to: Invalid - Issue status updated to: Closed (was: Open)
This issue has been migrated to Fedora Forge: https://forge.fedoraproject.org/quality/testdays-web/issues/54
Please continue any further discussion there.