Details
-
Type: New Feature
-
Status: Done/Fixed
-
Priority: Trivial
-
Resolution: Fixed/Completed
-
Affects Version/s: Unscheduled
-
Fix Version/s: 4.7.30
-
Component/s: None
-
Labels:
-
Versioning Impact:Minor (add functionality in backwards-compatible manner)
-
Documentation Required?:None
-
Funding Source:Contributed Code
-
Verified?:No
Description
Currently only users with ability to "edit" contact can see "add note" button in contact page notes tab, but if the add note link civicrm/contact/view/note?cid=CONTACT_ID&action=add was access directly by a user with no ability to "edit" the contact he will still be able to access the add note button, Also the user can still edit or delete the note by direct access using the URL.
This need to be fixed first so only user with "edit" ability can edit or delete notes, and a new permission need to be added called "add contact notes" so the user either need the ability to "edit" the contact or the new "add contact notes" permission to be able to add note for the currently viewed user.
Attachments
Issue Links
- links to