Uploaded image for project: 'CiviCRM'
  1. CiviCRM
  2. CRM-4822

Profiles : Limit Listings to Group setting does not restrict view access to contacts NOT in the group

          Details

          • Type: Bug
          • Status: Done/Fixed
          • Priority: Critical
          • Resolution: Fixed/Completed
          • Affects Version/s: 2.2.7
          • Fix Version/s: 2.2.8
          • Component/s: CiviCRM Profile
          • Labels:
            None

            Description

            Using the Profile setting - "Limit Listings to Group" - you can control which contact records are exposed to a profile search and listings page. However, contact records NOT In the group can currently be viewed through the Profile by directly entering a view URL. This is not expected behavior. Users should get access denied for any contact record not in the selected group.

              Attachments

                Activity

                  People

                  • Assignee:
                    lobo Donald A. Lobo
                    Reporter:
                    dgg David Greenberg
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    0 Start watching this issue

                    Dates

                    • Created:
                      Updated:
                      Resolved: