Uploaded image for project: 'CiviCRM'
  1. CiviCRM
  2. CRM-6426

Tabs are rendered for User Account Profiles for which the user does not have permission

    Details

    • Type: Bug
    • Status: Done/Fixed
    • Priority: Major
    • Resolution: Fixed/Completed
    • Affects Version/s: 3.1.5
    • Fix Version/s: 3.3.alpha
    • Component/s: CiviCRM Profile
    • Labels:
      None

      Description

      Steps to reproduce. (Assumes Drupal.)

      1.) Create a profile used for 'User Accounts'. Create ACL to grant access to this profile.
      2.) Log-in as a user who does NOT have permission for the profile.
      3.) On the user's Account page. Click Edit.

      Results: A sub-tab is rendered for the unauthorized profile.

      Suggested resolution: Profiles which a user does not have access to should not appear as sub-tabs on the user edit page.

        Attachments

          Activity

            People

            • Assignee:
              lobo Donald A. Lobo
              Reporter:
              mchapman2000 Matt Chapman
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: