Details
-
Type:
Bug
-
Status: Done/Fixed
-
Priority:
Major
-
Resolution: Fixed/Completed
-
Affects Version/s: 4.3.4
-
Fix Version/s: 4.3.5
-
Component/s: CiviContribute, WordPress Integration
-
Labels:None
Description
The self-service links for donors to update or cancel their recurring contributions contain URL paths that are not currently handled in the WordPress plugin file (WordPress/civicrm.php) civicrm_check_permissions(). This results in users getting Access Denied even though they have the corresponding CMS permission ('make online contributions').
Need to add these 'second arguments' to the permitted CiviContribute path arguments:
'updaterecur', 'updatebilling', 'unsubscribe'