nodebb-plugin-onekite-calendar 2.0.64 → 2.0.65

package/lib/api.js

@@ -2,12 +2,9 @@
 
 const crypto = require('crypto');
 
-const meta = require.main.require('./src/meta');
 const nconf = require.main.require('nconf');
 const user = require.main.require('./src/user');
 const groups = require.main.require('./src/groups');
-const db = require.main.require('./src/database');
-const logger = require.main.require('./src/logger');
 
 const dbLayer = require('./db');
 const { getSettings } = require('./settings');
@@ -251,25 +248,26 @@ async function canCreateSpecial(uid, settings) {
 }
 
 
+/**
+ * Determines if a user can join or leave special events as a participant.
+ * 
+ * This permission is intentionally permissive: any authenticated user can participate
+ * in special events, regardless of group membership. This differs from creation/deletion
+ * permissions which remain restricted to specific groups.
+ * 
+ * @param {number|string} uid - The user ID. Falsy values (0, null, undefined, '') indicate guest/unauthenticated users.
+ * @param {Object} settings - Plugin settings (unused but kept for API consistency with other permission functions).
+ * @returns {boolean} True if the user can join/leave special events (i.e., is authenticated).
+ * 
+ * @since 1.0.0 Modified to allow all authenticated users (previously restricted to specific groups)
+ */
 async function canJoinSpecial(uid, settings) {
-  if (!uid) return false;
-  // Admins always allowed
-  try {
-    const isAdmin = await groups.isMember(uid, 'administrators');
-    if (isAdmin) return true;
-  } catch (e) {}
-
-  // Special-event creators can join/leave
-  if (await canCreateSpecial(uid, settings)) return true;
-
-  // Location creator groups can also participate (even if they can't create events)
-  const allowed = normalizeAllowedGroups(settings.creatorGroups || '');
-  if (!allowed.length) return false;
-  return userInAnyGroup(uid, allowed);
+  // Any authenticated user (non-zero uid) can participate in special events.
+  // The !! coercion converts truthy values to true, falsy to false.
+  return !!uid;
 }
 
 
-
 async function canDeleteSpecial(uid, settings) {
   if (!uid) return false;
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nodebb-plugin-onekite-calendar",
-  "version": "2.0.64",
+  "version": "2.0.65",
   "description": "FullCalendar-based equipment reservation workflow with admin approval & HelloAsso payment for NodeBB",
   "main": "library.js",
   "license": "MIT",

package/plugin.json

@@ -39,5 +39,5 @@
   "acpScripts": [
     "public/admin.js"
   ],
-  "version": "2.0.64"
+  "version": "2.0.65"
 }