From c70a0a5893c943e95333b39324b8068a865bfb91 Mon Sep 17 00:00:00 2001
From: Magnus Hagander <magnus@hagander.net>
Date: Wed, 21 May 2025 18:05:11 +0200
Subject: [PATCH] Use secret based link to sponsor-vouchers invoice on
 dashboard

There can be multiple managers of a sponsorship, so for all of them to
be able to view (and pay) the invoice, we need to use the secret-url
link rather tha th eone expecting the user to be the same one as the one
who created it.

Spotted by Cornelia Biacsics
---
 template/confsponsor/sponsor.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/template/confsponsor/sponsor.html b/template/confsponsor/sponsor.html
index fd81d3e3..9f11f934 100644
--- a/template/confsponsor/sponsor.html
+++ b/template/confsponsor/sponsor.html
@@ -258,7 +258,7 @@ this page.
 </p>
 <ul>
 {%for v in pendingvouchers%}
- <li>Invoice #<a href="/https/git.postgresql.org/invoices/{{v.invoice.id}}/">{{v.invoice.id}}</a></li>
+ <li>Invoice #<a href="/https/git.postgresql.org/invoices/{{v.invoice.id}}/{{v.invoice.recipient_secret}}/">{{v.invoice.id}}</a></li>
 {%endfor%}
 </ul>
 {%endif%}
-- 
2.30.2