Uploaded image for project: 'CiviCRM'
  1. CiviCRM
  2. CRM-14877

users bypass ACLs when exporting

          Details

          • Type: Security Advisory
          • Status: Done/Fixed
          • Priority: Major
          • Resolution: Fixed/Completed
          • Affects Version/s: 4.4.5
          • Fix Version/s: 4.5
          • Component/s: None
          • Labels:
            None

            Description

            When exporting contacts if select all is used the ACL clause is not added to the export - allowing users to obtain details of restricted contacts

              Attachments

                Activity

                  People

                  • Assignee:
                    eileen Eileen McNaughton
                    Reporter:
                    eileen Eileen McNaughton
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    2 Start watching this issue

                    Dates

                    • Created:
                      Updated:
                      Resolved: