Uploaded image for project: 'CiviCRM'
  1. CiviCRM
  2. CRM-20507

Prevent disclosure of is_public=0 Custom Groups in email templates

          Details

          • Type: Improvement
          • Status: Done/Fixed
          • Priority: Trivial
          • Resolution: Fixed/Completed
          • Affects Version/s: 4.7.19
          • Fix Version/s: 4.7.25
          • Component/s: Core CiviCRM
          • Labels:
          • Versioning Impact:
            Patch (backwards-compatible bug fixes)
          • Documentation Required?:
            None
          • Funding Source:
            Needs Funding
          • Verified?:
            No

            Description

            Now that Custom Groups have an "is_public" setting (merged for 4.7.19 - https://issues.civicrm.org/jira/browse/CRM-20318) it seems wise to also adjust the email templates to not mail/disclose information that is configured to be not-public.

            Example: a custom group of fields attached to event participants can now be configured to be a backend-only field by setting the is_public to 0 (see attachment).

            The now 'secret' group of fields will now still be included in the emails when registering someone offline.

            It would be good to not have Custom Groups with is_public = 0 included in these emails.
            In https://github.com/civicrm/civicrm-core/pull/10028 Eleen asked me to open this issue to be assigned to @jitendrapurohit 

             

              Attachments

                Activity

                  People

                  • Assignee:
                    Unassigned
                    Reporter:
                    magnolia61 Richard
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    5 Start watching this issue

                    Dates

                    • Created:
                      Updated:
                      Resolved: