Uploaded image for project: 'CiviCRM'
  1. CiviCRM
  2. CRM-19379

ACLs restricted users should have access to their own groups

    Details

    • Type: Bug
    • Status: Open
    • Priority: Trivial
    • Resolution: Unresolved
    • Affects Version/s: 4.7.11
    • Fix Version/s: None
    • Component/s: Core CiviCRM
    • Labels:
      None
    • Versioning Impact:
      Patch (backwards-compatible bug fixes)
    • Documentation Required?:
      None
    • Funding Source:
      Needs Funding

      Description

      Prior to CRM-13644, ACL restricted users could send email to all available groups, which was wrong. However, the fix means that ACL restricted users can only send email to groups that they are specifically have been granted access to.

      That means if an ACL user creates a group, they can't send it an email.

      It seems that groups that the user owns should be listed in all places that groups are listed.

      (Note: CRM-18159 ensures that mail will only go out to contacts the user is able to access, even if the smart group contains contacts outside of their permission.)

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              jamie Jamie McClelland
            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated: