Use secret based link to sponsor-vouchers invoice on dashboard

There can be multiple managers of a sponsorship, so for all of them to
be able to view (and pay) the invoice, we need to use the secret-url
link rather tha th eone expecting the user to be the same one as the one
who created it.

Spotted by Cornelia Biacsics

diff --git a/template/confsponsor/sponsor.html b/template/confsponsor/sponsor.html
index fd81d3e35a3442ddc12831638c66a1baa186aae0..9f11f93457f0a7a25d309ce96eb47fefd6bfc312 100644 (file)
--- a/template/confsponsor/sponsor.html
+++ b/template/confsponsor/sponsor.html
@@ -258,7 +258,7 @@ this page.
 </p>
 <ul>
 {%for v in pendingvouchers%}
 </p>
 <ul>
 {%for v in pendingvouchers%}

- <li>Invoice #<a href="/invoices/{{v.invoice.id}}/">{{v.invoice.id}}</a></li>
+ <li>Invoice #<a href="/invoices/{{v.invoice.id}}/{{v.invoice.recipient_secret}}/">{{v.invoice.id}}</a></li>

 {%endfor%}
 </ul>
 {%endif%}
 {%endfor%}
 </ul>
 {%endif%}