Uploaded image for project: 'CiviCRM'
  1. CiviCRM
  2. CRM-17113

Don't allow user with ACL "View Event Participants" to change fee selections

          Details

          • Type: Bug
          • Status: Done/Fixed
          • Priority: Minor
          • Resolution: Fixed/Completed
          • Affects Version/s: 4.6.8
          • Fix Version/s: 4.7
          • Component/s: CiviEvent
          • Labels:
          • Documentation Required?:
            None
          • Funding Source:
            Contributed Code

            Description

            Currently a user with permission "View Event Participants" but NOT "Edit Event Participants" is able to click "Change Selections" and edit price set data for each participant. This patch fixes this and only allows fee selections to be changed when user has "Edit Event Participants" permission.

            Patches to ParticipantView.tpl and ParticipantFeeSelection.php here: https://github.com/mattwire/civicrm.bca-custom/commit/2c997c8c1e4a97befcc5bd263ea09db3b9dcf14f.diff

              Attachments

                Activity

                  People

                  • Assignee:
                    dgg David Greenberg
                    Reporter:
                    mattwire Matthew Wire
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    2 Start watching this issue

                    Dates

                    • Created:
                      Updated:
                      Resolved: