Uploaded image for project: 'CiviCRM'
  1. CiviCRM
  2. CRM-6634

Make profile settings more granular to allow for editing of data via drupal user page, but not viewing

    Details

    • Type: New Feature
    • Status: Done/Fixed
    • Priority: Minor
    • Resolution: Won't Fix
    • Affects Version/s: 3.1.6
    • Fix Version/s: Unscheduled
    • Component/s: CiviCRM Profile
    • Labels:
      None

      Description

      Currently when configuring a profile, there is an option to use that profile for "View/Edit Drupal User Account ". When selected, and proper access granted via ACLs such that a user can edit their own data, all users with permission can VIEW all other users' data in that profile when viewing their drupal /user/uid page.

      This makes it hard to allow users to edit data that would otherwise not be displayed to other site users (address/phone for example).

      This feature request is to break out the profile options such that there is a "View on Drupal User Account" and an "Edit on Drupal User Account".

      Alternately, the ACLs could be reworked such that there is a "view any" and a "view own" permission for custom data and/or profile access. It seems that "Edit" implies "Edit Own" when it comes to profiles. It seems that now "view any" is then inherited when "edit" is granted to a category of users like "Authenticated".

      Unless I am completely missing something.

        Attachments

          Activity

            People

            • Assignee:
              lobo Donald A. Lobo
              Reporter:
              gregoryheller Gregory Heller
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: