Is there a setting that I am missing that allows a registered user to add an event, but NOT have the ability to delete the entire module? That has happen twice, and then we have to rebuild the calendar. They think they are deleting an event, but they actually delete the module from the pull down. I tried each permissions setting by it's self, and what I saw was if they can add event, then they can delete the module. Thoughts? Thanks, Gabe

Hi Gabe,

I guess that you are using DNN 5.6.2? Unfortunately there is a bug in this version of DNN that gives anyone with edit rights to a module in effect the same rights as a page editor. This bug has now been introduced 3 times into DNN core, and I guess will go away again (hopefully for ever) in 6.0.0. To prove this, give someone edit rights to another module (e.g. an HTML module), and you will see they get the same access. The intended DNN security model is that only page editors can change module settings, delete modules, etc.

Because of the repetition of this bug, in 5.2.0 we are removing the dependence on the core Edit Permission, and replacing it with an Events module specific permission. Then the problem will go away for good....

As Chris says however, you can recover the module from the recycle bin.

Cheers
Roger

---

DNN MVP
Events - Get the latest version - Upgrade now!!
Feedback 6.4.2 - Now available - Give it a go!
Find us on Codeplex - DNN Events, DNN Feedback

---

Requirements/Bugs - Please submit them on Codeplex

The trash bin... DUH. Jeez I wish I thought of that. You can bet I won't forget it. I am glad that it is a bug, and not just the user :) Will it not be fixed in 5.3 dnn? Because it is a feature? Hmm. Ok. So I understand that there will be a new version of the events module that will remove this issue by adding a different level? I will be sure to keep an eye out for it. Thanks for all the info! Very helpful :) Gabe