Uploaded image for project: 'CiviCRM'
  1. CiviCRM
  2. CRM-15845

Relationship tab without "view all contacts" permission

    Details

    • Type: Bug
    • Status: Done/Fixed
    • Priority: Minor
    • Resolution: Fixed/Completed
    • Affects Version/s: 4.5.5
    • Fix Version/s: 4.5.6
    • Component/s: None
    • Labels:
    • Documentation Required?:
      None

      Description

      We upgrade recently CiviCRM from 4.4.6 to 4.5.5 and the users without "view all contacts permissions" are getting a DataTables warning message when they open relationship tab and no relationships are displayed.

      I have been researching a bit and I found that the problem is given because ajax callback civicrm/ajax/contactrelationships is set to "view all contacts" permission in civicrm_menu table.

      If we set the value of access_arguments field to 'a:2:{i:0;a:1:

      {i:0;s:14:"access CiviCRM";}

      i:1;s:3:"and";}' the error disappears.

      I opened a thread in the forum http://forum.civicrm.org/index.php/topic,35463.0.html and Coleman suggests that it would also to "check for permission to view the specific contact in question within the ajax callback"

        Attachments

          Activity

            People

            • Assignee:
              kurund Kurund Jalmi
              Reporter:
              francescbassas Francesc Bassas i Bullich
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: