Details
-
Type: Bug
-
Status: Done/Fixed
-
Priority: Minor
-
Resolution: Fixed/Completed
-
Affects Version/s: 4.5.5
-
Fix Version/s: 4.5.6
-
Component/s: None
-
Labels:
-
Documentation Required?:None
Description
We upgrade recently CiviCRM from 4.4.6 to 4.5.5 and the users without "view all contacts permissions" are getting a DataTables warning message when they open relationship tab and no relationships are displayed.
I have been researching a bit and I found that the problem is given because ajax callback civicrm/ajax/contactrelationships is set to "view all contacts" permission in civicrm_menu table.
If we set the value of access_arguments field to 'a:2:{i:0;a:1:
{i:0;s:14:"access CiviCRM";}i:1;s:3:"and";}' the error disappears.
I opened a thread in the forum http://forum.civicrm.org/index.php/topic,35463.0.html and Coleman suggests that it would also to "check for permission to view the specific contact in question within the ajax callback"