Details
-
Type: Bug
-
Status: Done/Fixed
-
Priority: Major
-
Resolution: Fixed/Completed
-
Affects Version/s: 4.3.5, 4.4.2
-
Fix Version/s: 4.5
-
Component/s: None
-
Labels:None
Description
Removal of tags is not allowed if the user does not have the permission "delete contacts". The user will get the error message:
API permission check failed for entity_tag/delete call; missing permission: delete contacts.
Anyhow, this does not seem to be the intended behaviour. The corresponding permission should be "edit all contacts", as is also stated in the documentation: http://wiki.civicrm.org/confluence/display/CRMDOC/Default+Permissions+and+Roles
From an admin's perspective, I think it's a desirable scenario to let users edit tags, but not delete contacts.
I tried this on two installs of the 4.3 and 4.4 branch. We don't have a patch for this and won't be able to provide one in the next weeks.