Details
-
Type: Bug
-
Status: Done/Fixed
-
Priority: Major
-
Resolution: Fixed/Completed
-
Affects Version/s: 4.3.0
-
Fix Version/s: 4.3.0
-
Component/s: Accounting Integration
-
Labels:None
Description
Delete in CiviMember and delete in CiviEvent permissions override the delete in CiviContribute permission: if a user has the former but not the latter they can still delete the associated payments for a membership or participant record as in the past. I would prefer to not cascade these deletes into the financial info, just into membership_payment and participant_payment records, for users without that permission.
Users should not be allowed to delete participant or membership record if the record has an associated contribution AND the user doesn't have 'delete in CiviContribute' permission. Status message: "This <participant / membership> is linked to a contribution. You must have 'delete in CiviContribute' permission in order to delete this record."