settle up - only parties involved should perform
Now anyone can do settle up for any people... it should be only with people who involved in the transaction...
I’m assuming this is within groups (if it’s outside of groups, it’s a big bug and we need to fix it immediately, please email support@splitwise.com). Within groups, we expect any user in the group to be able to make any change. This is for reasons of simplicity and to make a lot of common use-cases for groups reasonable. If you’re terribly worried about activity in the group, turn on email notifications for expense updates, adds and deleted.
Marshall
-
Azfar Khan commented
Proposed Solution:
Only a Lender should be allowed to Settle up the payment. Its the way to acknowledging the payment. Unless Lender itself authorized any individual over mutual payments or Payments related to a specific Group can be settled by the authorized person on his behalf.It is difficult for Non frequent users (payer or lender) to find the old settle up entries and reconcile them (whether they are genuine or faulty) or search through email for all such notifications.
Furthermore, if someone settle up mistakenly or purposely to deceit. It will be difficult to track such faulty settlements over longer periods. It kills the purpose of the application, if the user manually check and reconcile all settlement are correct or wrongly performed. The Application must restrict it. Addition of the payment can be done by anyone however its not the same in case of settlements