Uploaded image for project: 'CiviCRM'
  1. CiviCRM
  2. CRM-8902

Adding Cases in Drupal requires permission 'access all cases and activities'. Add an explicit 'add cases' permission

    Details

    • Type: Bug
    • Status: Done/Fixed
    • Priority: Major
    • Resolution: Fixed/Completed
    • Affects Version/s: 4.0.5
    • Fix Version/s: 4.1.0
    • Component/s: CiviCase
    • Labels:
      None

      Description

      A user should be able to add a case without having access to all cases

      I've added a new permission for CiviCase: 'add cases'. Either this permission OR 'access all cases' is required to add a case. Change affects Case menu (New Case), as well as Create New block items and Actions button on Contact Summary.

      From line148 of CRM/Case/Form/Case.php
      if ( ($this->_action & CRM_Core_Action::ADD) &&
      !CRM_Core_Permission::check( 'access all cases and activities' ) )

      { CRM_Core_Error::fatal( ts( 'You are not authorized to access this page.' ) ); }

      'access all cases and activities' should be 'access my cases and activities'

        Attachments

          Activity

            People

            • Assignee:
              dgg David Greenberg
              Reporter:
              vanrijm Mark van Rij
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: