Details
-
Type: Bug
-
Status: Done/Fixed
-
Priority: Major
-
Resolution: Won't Fix
-
Affects Version/s: 2.0
-
Fix Version/s: 4.3.0
-
Component/s: CiviCRM Profile
-
Labels:None
Description
Per CRM/Profile/Page/Listing.php, lines 248-250:
if ( ! CRM_Core_Permission::check( 'access CiviCRM' ) )
{ $editLink = false; }This means that even if a user has permission to edit a contact via ACLs or via 'edit all contacts' permission, they still can't use a profile form to edit a contact unless they have 'access CiviCRM' permission also.
For me, the entire purpose of using profile edit forms is to avoid granting users full access the CiviCRM interface. So, it's my opinion that the above code should simply be removed. Doing so works for me, but I haven't thoroughly tested the implications of this yet, so someone smarter than me should take a look.
Thanks.