There's an issue with permissions that we were able to just ignore for a while but now that we have a lot of forms on our forum, it's starting to bother more and more people. Let me see if I can describe it well:
If someone has the permission "See Form", but not "Submit Form", upon trying to load the form, they'll get a message saying something like "Sorry, there is a problem
The page you are trying to access is not available to guests, but may be available if you sign in."
So in reality, they cannot see the form, despite the permission setting saying they can.
And then furthermore, if someone does not have the permission "See Form", they'll just be redirected to the full list of forms they can see (which includes the ones described in the above scenario). Note that this issue happens regardless of whether or not the "Require form url?" setting is on or off, meaning that people are still able to access the central Forms page by attempting to access a form they don't have the permission to see.
This creates a number of problems, from people being confused when linked to a form that guests can't see and instead just getting a whole list of forms, not really understanding what they were linked to, and if there is a permission called "See Form" and "Submit Form", anyone using it would assume that with Submit turned off, it means that they'll still be able to actually see the content.
Would it not make more sense to change this so that people who do not have the permission to "See Form" get that warning, and people who do have permission to see a form, but not submit see the actual form fully displayed as anyone with both See + Submit perms, but instead of the "Submit" button, there'd be a deactivated button or a warning?
I'm no master coder but shouldn't it be possible to put the "Submit" button in an {{if}} that asks whether the member has the Submit permission, and if they don't, instead display a deactivated button saying something like "Must be logged in" or "Can't Submit" (or even a custom text that the user can define per form - accounting for different permission levels), and maybe even a login button next to that - or just display an actual warning that says "You do not have the permission to submit this form." instead of the button itself?