A web user may be able to bypass membership add-on restrictions if multiple add-on types are available.
For example: if there are 2 add-on types and both are set to only allow 1 per member, a web user may still be able to add 2 of the same type to the cart.
This issue has been resolved. If you experience this error, please chat with support to provide the exact steps that were taken.
Steps to Duplicate
Preconditions: - Membership program exists with multiple levels and is approved for web - 2 types of "additional member" add-ons are active on the membership - For both the add-ons, "Can purchase multiple" is set to NO - Add-ons are also available for web (Web > Manage Membership Forms > Form Options)
Go to Web > Manage Membership Forms
Open the URL for the program in the precondition
Select a level. 2 add-on buttons appear; 1 for each add-on type
Click the button for Add-on Type 1
Enter additional member information. Note Add-on Type 1 button is not removed. Both add-on buttons are still present
Click the Add-on Type 1 button again
Enter additional member information
Add to cart
Fill out all required fields and proceed to payment