Details
-
Type:
Improvement
-
Status: Open
-
Priority:
Minor
-
Resolution: Unresolved
-
Affects Version/s: 4.7.29
-
Fix Version/s: None
-
Component/s: None
-
Labels:None
-
Versioning Impact:Patch (backwards-compatible bug fixes)
-
Documentation Required?:None
-
Funding Source:Needs Funding
-
Verified?:No
Description
When delegating access to other users to create events, they cannot add a payment processor to the event without the 'administer CiviCRM' permission - which is too much access.
This is because the PaymentProcessor 'getlist' API call requires 'administer CiviCRM' permissions in order to run. This is how the list of payment processors is populated on the 'Fees' tab when creating an event.
To me it makes most sense to allow people with 'access CiviCRM' permission to access the paymentprocessor 'getlist' action?
Steps to recreate:
- Give a user 'edit all events' permission, but not 'administer CiviCRM'
- Go to create an event
- Go to the 'fees' tab
- Notice that the list of payment processors does not populate.