Uploaded image for project: 'CiviCRM'
  1. CiviCRM
  2. CRM-8491

Delete Contact permission being ignored on the Contact results screen

          Details

          • Type: Bug
          • Status: Done/Fixed
          • Priority: Critical
          • Resolution: Fixed/Completed
          • Affects Version/s: 3.4.4
          • Fix Version/s: 3.4.5
          • Component/s: Core CiviCRM
          • Labels:
            None

            Description

            Hi

            We have identified that users who DON'T have the CiviCRM delete permission can delete contacts when they shouldn't be able to.
            This only happens if they use the 'Delete Contact' link found via the 'more' menu available on the Search Result pages (found at the RHS of each contacts result).

            It looks like this has only started happening since we moved some sites to 3.4.x

            Yours
            Olly

              Attachments

                Activity

                  People

                  • Assignee:
                    rohan Rohan S. Chavan
                    Reporter:
                    gibsonoliver oliver gibson
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    0 Start watching this issue

                    Dates

                    • Created:
                      Updated:
                      Resolved: