Uploaded image for project: 'CiviCRM'
  1. CiviCRM
  2. CRM-5119

Some CiviCRM navigation menu items are not properly permissioned

    Details

    • Type: Bug
    • Status: Done/Fixed
    • Priority: Major
    • Resolution: Fixed/Completed
    • Affects Version/s: 3.0
    • Fix Version/s: 3.0
    • Component/s: Core CiviCRM
    • Labels:
      None

      Description

      Several navigation menu items have not been assigned proper permissions. Examples:

      Contacts menu -> New Individ, New Org, New Household, Import Contacts, Import Activities

      Please review the permissions set for the navigation menu items in civicrm_navigation.tpl and compare them to the permissions assigned in the corresponding menu.xml item - and fix as needed.

      Then please regenerate civicrm_generated.mysql AND fix the upgrade script(s) to set these properly for upgrades (from 2.2x and from previous 3.0 versions).

      ---- Original Post ----------
      My Drupal user does not have the permission to 'add contacts', and indeed if I visit /civicrm/contact/add&reset=1&ct=Individual then I get an access denied message. But the option should not even be visible in the menu in the first place, since my user doesn't have the permission to do it. This seems to apply to the whole menu as I can see all kinds of entries that I am not allowed to perform such as importing contacts, creating contribution pages, managing contribution pages etc etc.

      This adds a massive element of confusion for users with limited permissions.

        Attachments

          Activity

            People

            • Assignee:
              rajan Rajan P Mayekar
              Reporter:
              mrfelton Tom Kirkpatrick
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: