Details
-
Type: Bug
-
Status: Done/Fixed
-
Priority: Trivial
-
Resolution: Fixed/Completed
-
Affects Version/s: 4.6.2
-
Fix Version/s: 4.6.3
-
Component/s: Core CiviCRM
-
Labels:
-
Documentation Required?:None
Description
1) Login as a user without "CiviCRM: edit groups" permission, but with "edit contacts" permissions etc.
2) Open a contact and click on the "groups" tab: there you see the contact's group memberships, where you can remove/delete these memberships.
3) Clicking Remove or Delete fails with an error message: "Error API permission check failed for GroupContact/delete call; insufficient permission: require access CiviCRM and edit groups"
4) Alternatively search all members of the group, select the contact and remove it from the group via "action -> remove contact from groups" => it works.
The "CiviCRM edit groups" permission should allow users to add/remove/edit groups themselves, but should not affect permissions to add/remove contacts from groups.