nodebb-plugin-onekite-calendar 2.0.61 → 2.0.62

package/lib/api.js

@@ -420,6 +420,26 @@ async function canCreateSpecial(uid, settings) {
   return false;
 }
 
+
+async function canJoinSpecial(uid, settings) {
+  if (!uid) return false;
+  // Admins always allowed
+  try {
+    const isAdmin = await groups.isMember(uid, 'administrators');
+    if (isAdmin) return true;
+  } catch (e) {}
+
+  // Special-event creators can join/leave
+  if (await canCreateSpecial(uid, settings)) return true;
+
+  // Location creator groups can also participate (even if they can't create events)
+  const allowed = normalizeAllowedGroups(settings.creatorGroups || '');
+  if (!allowed.length) return false;
+  return userInAnyGroup(uid, allowed);
+}
+
+
+
 async function canDeleteSpecial(uid, settings) {
   if (!uid) return false;
   try {
@@ -958,7 +978,7 @@ api.getSpecialEventDetails = async function (req, res) {
     participants,
     participantsUsernames: await usernamesByUids(participants),
     canDeleteSpecial: canSpecialDelete,
-    canJoin: uid ? await canCreateSpecial(uid, settings) : false,
+    canJoin: uid ? await canJoinSpecial(uid, settings) : false,
     isParticipant: uid ? participants.includes(String(uid)) : false,
     icsUrl: links.icsUrl,
     googleCalUrl: links.googleCalUrl,
@@ -973,7 +993,7 @@ api.joinSpecialEvent = async function (req, res) {
   const settings = await getSettings();
   const uid = req.uid;
   if (!uid) return res.status(401).json({ error: 'not-logged-in' });
-  const ok = await canCreateSpecial(uid, settings);
+  const ok = await canJoinSpecial(uid, settings);
   if (!ok) return res.status(403).json({ error: 'not-allowed' });
 
   const eid = String(req.params.eid || '').replace(/^special:/, '').trim();
@@ -1000,7 +1020,7 @@ api.leaveSpecialEvent = async function (req, res) {
   const settings = await getSettings();
   const uid = req.uid;
   if (!uid) return res.status(401).json({ error: 'not-logged-in' });
-  const ok = await canCreateSpecial(uid, settings);
+  const ok = await canJoinSpecial(uid, settings);
   if (!ok) return res.status(403).json({ error: 'not-allowed' });
 
   const eid = String(req.params.eid || '').replace(/^special:/, '').trim();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nodebb-plugin-onekite-calendar",
-  "version": "2.0.61",
+  "version": "2.0.62",
   "description": "FullCalendar-based equipment reservation workflow with admin approval & HelloAsso payment for NodeBB",
   "main": "library.js",
   "license": "MIT",

package/plugin.json

@@ -39,5 +39,5 @@
   "acpScripts": [
     "public/admin.js"
   ],
-  "version": "2.0.61"
+  "version": "2.0.62"
 }