[CRM-15314] User with "access CiviMail or Access CiviEvent" drupal permisions CAN send mailings or create Events - CiviCRM Issue Tracker

Details

Type: Security Advisory
Status: Done/Fixed
Priority: Major
Resolution: Won't Fix
Affects Version/s: 4.4.6
Fix Version/s: None
Component/s: CiviEvent, CiviMail
Labels:
- permissions

Documentation Required?:
None
Workarounds:

Hide

Please discuss and propose a new scheme on the forums

Show
Please discuss and propose a new scheme on the forums

Description

I think Access CiviMail and Access CiviEvent should not let users send mailings to everybody nor create Events and publish it. They must be like Access CiciCRM or Access Membership permisions, only for "access" and, maybe, simple information view...

Attachments

Activity

People

Assignee:

Unassigned

Reporter:

Joan Cervan

Votes:

0 Vote for this issue

Watchers:

1 Start watching this issue

Dates

Created:

2014-09-16 11:21

Updated:

2014-09-16 14:32

Resolved:

2014-09-16 14:32