Uploaded image for project: 'CiviCRM'
  1. CiviCRM
  2. CRM-6266

Security issue on AJAX calls

          Details

          • Type: Bug
          • Status: Done/Fixed
          • Priority: Minor
          • Resolution: Fixed/Completed
          • Affects Version/s: 3.1.4
          • Fix Version/s: 4.1.0
          • Component/s: CiviCRM API
          • Labels:
            None

            Description

            Per http://forum.civicrm.org/index.php/topic,13751.15.html

            A user with 'access CiviCRM' permission can get information on contacts he/she doesn't have permission to through the REST URL

              Attachments

                Activity

                  People

                  • Assignee:
                    lobo Donald A. Lobo
                    Reporter:
                    eileen Eileen McNaughton
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    1 Start watching this issue

                    Dates

                    • Created:
                      Updated:
                      Resolved: