Uploaded image for project: 'CiviCRM'
  1. CiviCRM
  2. CRM-4941

Restricting profile by Group can disable one or all Drupal user/XXX pages on a site

    Details

    • Type: Bug
    • Status: Done/Fixed
    • Priority: Major
    • Resolution: Fixed/Completed
    • Affects Version/s: 3.0
    • Fix Version/s: Unscheduled
    • Component/s: None
    • Labels:
      None

      Description

      Hi there, thanks for looking. Currently reproduced on demo site a bug which although is a possible misconfiguration of CiviCRM, does result in a rather serious public bug, disabling user/XXX pages on a site and sending all users attempting to view their "my account" page to homepage.

      profile: testing stoob (#6)
      contains non-custom individual data
      profile is restricted to show only members of a group: Stoob testing (#15)
      profile properties are configured to show up on add/edit user account

      civicrm contact: jdoe@gmail.com is NOT a member of the above group "Stoob testing" #15

      behold, http://drupal.demo.civicrm.org/user/2 (jdoe@email.com) doesn't work as a page any longer, and is simply redirected to the website homepage http://drupal.demo.civicrm.org/user/2/edit works and the user is able to edit the profile data

      Suggestion: This error could cause an unwitting user to disable one (or perhaps all!) user pages for a Drupal site based on a misconfiguration or misunderstanding of the CiviCRM Group restriction of a profile. Either enhanced functionality to only show profile would be appropriate, or at least perhaps this error should be handled more gracefully, and not disable the entire Drupal user page

        Attachments

          Activity

            People

            • Assignee:
              yashodha Yashodha Chaku
              Reporter:
              stoob Stoob
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: