Details
-
Type:
Sub-task
-
Status: Done/Fixed
-
Priority:
Major
-
Resolution: Fixed/Completed
-
Affects Version/s: 4.6.5
-
Fix Version/s: 4.6.6
-
Component/s: CiviCRM Profile, CiviEvent
-
Labels:None
-
Documentation Required?:None
-
Funding Source:Paid Issue Queue
-
Payment Status:Paid
Description
Users with 'manage event profiles' permission (but NOT 'administer CiviCRM' permission) should not be able to use or modify profiles that aren't connected to events.
Add a filter to the Profiles selector such that only profiles which already have an entry in the the uf_join table with module = 'CiviEvent' are included if the user doesn't have 'administer CiviCRM' permission.
Please track hours on this modification.
