Uploaded image for project: 'CiviCRM'
  1. CiviCRM
  2. CRM-17569

Invalid ACCESS DENIED on Financial Type admin page

    Details

    • Type: Bug
    • Status: Done/Fixed
    • Priority: Critical
    • Resolution: Fixed/Completed
    • Affects Version/s: 4.7
    • Fix Version/s: 4.7
    • Component/s: CiviContribute
    • Labels:
      None
    • Documentation Required?:
      User and Admin Doc
    • Funding Source:
      Contributed Code

      Description

      Joe Murray We found a critical "chicken and egg" bug related to the FT ACL project.

      Symptom:
      If ACL by Financial Type is NOT enabled, then all users other than user #1 (super admin) gets ACCESS DENIED on the page which lists Financial Types (civicrm/admin/financial/financialType?reset=1)

      Problem:
      It looks like access to that page requires this permisson - "administer CiviCRM Financial Types" - regardless of whether ACL by FT is true or false. HOWEVER, that permission doesn't show up in the CMS permissions list unless ACL by FT is TRUE.

      Solution:
      That permission should ONLY be required if ACL by FT is TRUE

        Attachments

          Activity

            People

            • Assignee:
              dgg David Greenberg
              Reporter:
              dgg David Greenberg
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 1 hour, 30 minutes
                1h 30m