Details
-
Type:
Improvement
-
Status: Done/Fixed
-
Priority:
Major
-
Resolution: Fixed/Completed
-
Affects Version/s: 2.1
-
Fix Version/s: 2.1
-
Component/s: CiviContribute, CiviEvent, CiviGrant, CiviMember, CiviPledge
-
Labels:None
Description
Currently task actions do not respect permission.
Eg: If we gave only "access CiviCRM", "access CiviEvent" permissions to Authenticated User, He can delete participants using "Delete" task action.