Details
-
Type: Bug
-
Status: Done/Fixed
-
Priority: Major
-
Resolution: Fixed/Completed
-
Affects Version/s: 1.9, 2.0
-
Fix Version/s: None
-
Component/s: Core CiviCRM
-
Labels:None
Description
Steps to reproduce with Drupal 5.3:
In Drupal, when I go in Administer > Access Control, the options "profile listings and forms" and "access all custom data" are disabled for all the roles (except admin).
Then, when I log with any user and I go in " Find Contacts > Advanced Search " , all the existing profiles are listed in the Search Views drop down.
The Search Views drop down should reflect the ACL structure. A user without the "profile listings and forms" option should see only the profiles available to his group configured in the ACLs.