Uploaded image for project: 'CiviCRM'
  1. CiviCRM
  2. CRM-18957

Apis don't respect permissions

          Details

          • Type: Bug
          • Status: Open
          • Priority: Minor
          • Resolution: Unresolved
          • Affects Version/s: 4.7.8
          • Fix Version/s: None
          • Component/s: None
          • Labels:
            None
          • Versioning Impact:
            Patch (backwards-compatible bug fixes)
          • Documentation Required?:
            None
          • Funding Source:
            Needs Funding

            Description

            I've hit another instance where the BAO enforces a permission regardless of the check_permissions flag being passed in. I think it makes sense to look at a fix along the
            lines of setting a variable when check_permissions is passed & then checking that

            There seems to be a permission

            CRM_Core_Config::singleton()->userPermissionTemp

            used by cxn - but I think we need a more generic

            CRM_Core_Config::singleton()->noPermissionCheck

            albeit the Config object feels a wierd place for that

              Attachments

                Activity

                  People

                  • Assignee:
                    Unassigned
                    Reporter:
                    eileen Eileen McNaughton
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    1 Start watching this issue

                    Dates

                    • Created:
                      Updated: