Uploaded image for project: 'CiviCRM'
  1. CiviCRM
  2. CRM-16174

Inappropriate session message from api calls when logged in

    Details

    • Type: Bug
    • Status: Done/Fixed
    • Priority: Trivial
    • Resolution: Cannot Reproduce
    • Affects Version/s: 4.6
    • Fix Version/s: Unscheduled
    • Component/s: None
    • Labels:
      None
    • Documentation Required?:
      None
    • Funding Source:
      Needs Funding

      Description

      Steps
      1) In Firebug do CRM.api('contribution', 'get') while logged into CiviCRM or otherwise call contribution api for a logged in user
      2) refresh

      Status messages introduced in CRM-12597 are displayed

      We did not recognize the search field: check_permissions. Please check and fix your contribution related smart groups.
      We did not recognize the search field: version. Please check and fix your contribution related smart groups.

      While a whitelist could be added (& frequently updated) I would argue that the BAO query object is the wrong place to set session messages and the message should be passed back to the calling function

      https://github.com/civicrm/civicrm-core/blob/4.6/CRM/Contribute/BAO/Query.php#L551-551

        Attachments

          Activity

            People

            • Assignee:
              colemanw Coleman Watts
              Reporter:
              eileen Eileen McNaughton
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: