Hello,<\/p>\n
I have a concern with the method used for QR code scanners for ticket validation. I understand, based on other submitted tickets that 1) Any QR code scanner works; QuickMark is mentioned 2) One must be logged into the the phones browser or the browser withing the scanner 3) One must have an editor role or “edit_post” and “read” access in their role 4) Tickets can be validated without the QR code by using the attendees list. <\/p>\n
So far, I have had no issues with being able to scan QR codes with these guidelines, however, it is not secure due to the users being able to access the WordPress dashboard and view all event information. The goal for my website is to allow all users to create and sell tickets for events but a huge part of making this service the best for my users involves being able to quickly scan guest tickets but also maintain the integrity of their information (sales, attendee count, etc.). <\/p>\n
I have already tried to use User Role Editor to allow and disallow permission but because the essential permission (edit_post) is checked, I cannot seem to work around this issue.<\/p>\n
Please let me know if you need any more details or information so that we can find the best solution for this problem.<\/p>\n","protected":false},"template":"","class_list":["post-1267590","topic","type-topic","status-closed","hentry"],"yoast_head":"\n