Uploaded image for project: 'CiviCRM'
  1. CiviCRM
  2. CRM-8995

Full text search returns contributions/memberships when the user doesn't have CiviContribute/CiviMember access

          Details

          • Type: Bug
          • Status: Done/Fixed
          • Priority: Trivial
          • Resolution: Fixed/Completed
          • Affects Version/s: 3.4.6
          • Fix Version/s: 4.1.0
          • Component/s: CiviCRM Search
          • Labels:
            None

            Description

            There is no permission check on contributions or memberships in the full text search

              Attachments

                Activity

                  People

                  • Assignee:
                    lobo Donald A. Lobo
                    Reporter:
                    adharris Andrew Harris
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    0 Start watching this issue

                    Dates

                    • Created:
                      Updated:
                      Resolved: