Uploaded image for project: 'CiviCRM'
  1. CiviCRM
  2. CRM-7227

Delete Contacts action is included in context menu array even though user does NOT have delete contacts permission

          Details

          • Type: Bug
          • Status: Done/Fixed
          • Priority: Trivial
          • Resolution: Fixed/Completed
          • Affects Version/s: 3.3.1
          • Fix Version/s: 3.3.2
          • Component/s: Core CiviCRM
          • Labels:
            None

            Description

            (Discovered this when testing CRM-6789, but verified that the bug is not related to that change (same occurs on 3.3 demo site which didn't have that rev applied yet).

            Log in w/ user who does NOT have "delete contacts" permission, do Find Contacts, click (or right click) for actions context menu. Delete Contact is included. If you select it, you'll get access denied on the delete page.

              Attachments

                Activity

                  People

                  • Assignee:
                    rahulbile Rahul Bile
                    Reporter:
                    dgg David Greenberg
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    0 Start watching this issue

                    Dates

                    • Created:
                      Updated:
                      Resolved: