Uploaded image for project: 'CiviCRM'
  1. CiviCRM
  2. CRM-8012

Permission on the API to be fixed for custom groups

          Details

          • Type: Bug
          • Status: Done/Fixed
          • Priority: Major
          • Resolution: Fixed/Completed
          • Affects Version/s: 3.4.0
          • Fix Version/s: 3.4.5, 4.0.5
          • Component/s: CiviCRM API
          • Labels:
            None

            Description

            xavier_d: dlobo : http://svn.civicrm.org/civicrm/branches/v3.4.api/CRM/Core/DAO/.permissions.php
            xavier_d: custom_field and custom_group are wrong, aren't they ?
            dlobo: xavier_d: thats right. they should not have access to custom field/group if they dont have access custom data
            xavier_d: but having access to custom data is enough to create a custom group ?
            dlobo: xavier_d: yes, u
            dlobo: u'll also need administer civicrm for create/edit/delete
            dlobo: might want to change and commit

              Attachments

                Activity

                  People

                  • Assignee:
                    lobo Donald A. Lobo
                    Reporter:
                    xavier xavier dutoit
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    0 Start watching this issue

                    Dates

                    • Created:
                      Updated:
                      Resolved: