CRM-6426 Tabs are rendered for User Account Profiles for which the user does not have permission

          Details

          • Type: Bug
          • Status: Done/Fixed
          • Priority: Major
          • Resolution: Fixed/Completed
          • Affects Version/s: 3.1.5
          • Fix Version/s: 3.3.alpha
          • Component/s: CiviCRM Profile
          • Labels:
            None

            Description

            Steps to reproduce. (Assumes Drupal.)

            1.) Create a profile used for 'User Accounts'. Create ACL to grant access to this profile.
            2.) Log-in as a user who does NOT have permission for the profile.
            3.) On the user's Account page. Click Edit.

            Results: A sub-tab is rendered for the unauthorized profile.

            Suggested resolution: Profiles which a user does not have access to should not appear as sub-tabs on the user edit page.

              Attachments

                Activity

                [CRM-6426] Tabs are rendered for User Account Profiles for which the user does not have permission
                Matt Chapman added a comment -

                Here's a patch. It's written against 3.1.5, but hopefully will still apply. Anyway, it shows how to solve the bug.

                Donald A. Lobo added a comment -


                thanx for the patch

                Matt Chapman added a comment -

                I should also note that after applying the patch, it is necessary to flush Drupal's menu cache for the change to take effect.

                Donald A. Lobo added a comment -


                added the drupal menu rebuild to the upgrade script. thanx for the patch

                  People

                  • Assignee:
                    Donald A. Lobo
                    Reporter:
                    Matt Chapman

                    Dates

                    • Created:
                      Updated:
                      Resolved: