Uploaded image for project: 'CiviCRM'
  1. CiviCRM
  2. CRM-5844

Users Allowed tto Edit Other Users Via Dashboard

    Details

    • Type: Bug
    • Status: Done/Fixed
    • Priority: Critical
    • Resolution: Fixed/Completed
    • Affects Version/s: 3.0.3, 3.0.4, 3.1, 3.1.1, 3.1.2
    • Fix Version/s: 3.1.3
    • Component/s: CiviCRM Profile
    • Labels:
      None

      Description

      As detailed at http://forum.civicrm.org/index.php/topic,12232.0/topicseen.html, users can change the contact Id via the dashboard and edit other users (which they should not have access to.)

        Attachments

          Activity

            People

            • Assignee:
              neha.saraph Neha Kulkarni
              Reporter:
              johng John G
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: