Author Topic: Drupal permissions for contributions/membership renewals (Read 1756 times)

Laryn · November 17, 2009, 01:16:45 pm

I would like to volunteer to update the wiki page on Default Permissions and Roles in Drupal for slightly more clarity but I need a little guidance at first. I'd like to grant users the ability to submit a contribution page which renews their membership and updates their address information, and anonymous users to be able to submit a contribution page to create a new membership and provide their address information. I've read through the page above but it's still not clear to me which permissions will give them as little access as possible to CiviCRM.

From my reading, it would seem that the following permissions should be enough (for anonymous and authenticated users):
*edit memberships
*make online contributions
*profile listings and forms

But when I try this with a test user (manually set an expired membership, log in with this user, try to renew membership via a contribution page), it seems to go through but the membership is not updated in the back end, although the contribution is collected. Do I need to give access to "access CiviMember" or will that open my site up more than I want?

Dave Greenberg · November 18, 2009, 07:44:51 am

For 2.x and 3.0 versions of CiviCRM, your Anonymous role and Authenticated roles should need only the following permissions for the task you've outlined (signing up or renewing membership, entering or updating address info):

* make online contributions
* profile listings and forms

AND if an embedded Profile in your contribution page includes any custom fields, you also need to assign:

* Access all custom data

'edit memberships' is a back-office permissions (allowing staff or volunteers who have 'access CiviCRM' and 'access CiviMember' the ability to not just view but also create or edit memberships for contacts.

The behavior you're describing (membership not updated) is either a config issue, or some confusion about steps or possibly a bug based on some specific conditions. Please see if you can recreate this behavior on the public demo and if so describe steps to recreate. One thing to watch for is ... if you are logged in as a Drupal user who has an existing CiviMember membership - when you arrive at the Membership Signup / Renewal (online contribution) page - the site should "recognize" you and refect your existing membership, it's status and it's expiration date - and should show the "Renewal Title", renewal message etc as configured in Membership Settings for that online contribution page.

Laryn · November 19, 2009, 10:27:25 am

Hmm... I will investigate further. Thanks for the tips. That is what I thought so I was surprised when it wasn't working. I am going to have to double check the custom data idea because I didn't think there was anything custom but perhaps there was and I just don't remember it...

I was going to update the wiki page now that I understand, but upon returning it made more sense than it did the first time...

CiviCRM Community Forums (archive)

News:

Author Topic: Drupal permissions for contributions/membership renewals (Read 1756 times)

Laryn

Drupal permissions for contributions/membership renewals

Dave Greenberg

Re: Drupal permissions for contributions/membership renewals

Laryn

Re: Drupal permissions for contributions/membership renewals