Skip to content

Verification report event is sent accross multitenant organizations #8807

@paulinebessoles

Description

@paulinebessoles

Describe the bug
As an admin in a multitenant organization, I receive decidim.events.verifications.verify_with_managed_user notification from other organizations on the same tenant.

To Reproduce
This one is quite hard to reproduce

  1. Sign in as an admin on an instance with multiple organizations and enable document number authorization
  2. As an admin, represent a new user with a certain document number
  3. As a user, try to get authorized with the same authorization handler and document number
  4. As an admin from another organization, see that you receive the event in your emails

Expected behavior
Fix verification event leak on other organizations/tenants

Extra data (please complete the following information):

  • Decidim Version: [0.24]
  • I couldn't reproduce on try.decidim.org because there is only one organization

Additional context
This event is also lacking translations keys as signaled in #8661

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions