Users without 'RSVP to any event permission' can still RSVP for the Event, and are still shown the RSVP sidebar block. Best just not to show the RSVP sidebar block/section at all if they do not have RSVP permissions.
Particularly a problem, since it means Unregistered / Unconfirmed users (if given View Events permission, as is likely) can provide RSVP responses.
Particularly a problem, since it means Unregistered / Unconfirmed users (if given View Events permission, as is likely) can provide RSVP responses.
Last edited: