CiviCRM Community Forums (archive)

Just upgraded a site from 3.1.beta6 to 3.1.1 . A call to civicrm_contact_add that worked previously now fails.

Call:

  $orgParams = array(
    'contact_type'      => 'Organization',
    'contact_sub_type'  => 'Care_Provider',
    'organization_name' => $params['orgname'],
    'email'             => $params['email'],
    'custom_15'         => trim($params['firstname'] . ' ' . $params['lastname']),
    'custom_16'          => $params['jobrole'],
  );
  $org = civicrm_contact_add($orgParams);
 Error:

Invalid Custom Field Contact Type: Organization or Mismatched SubType: Care_Provider.
Custom fields 15 and 16 are in a custom group specified for Organization -> Care Provider:

mysql> select * from civicrm_custom_group where id = 3\G
*************************** 1. row ***************************
                         id: 3
                       name: EOI_SECTION_A_Applying_Service_Provider_Details
                      title: EOI SECTION A: Applying Service Provider Details
                    extends: Organization
   extends_entity_column_id: NULL
extends_entity_column_value: *Care_Provider*
                      style: Inline
           collapse_display: 0
                   help_pre:
                  help_post:
                     weight: 1
                  is_active: 1
                 table_name: civicrm_value_eoi_section_a_applying_service_p_3
                is_multiple: 0
               min_multiple: NULL
               max_multiple: NULL
       collapse_adv_display: 0
                 created_id: 1
               created_date: 2009-12-16 18:13:58
Note: for extends_entity_column_value, I replaced the separator characters with asterisks when pasting the above, as the forum preview chokes on the ASCII 1 characters.

Dave

Hi Shailesh,

I've got a bit further in investigating this. It seems to be an access control issue. The problem is occurring for non-admin users who don't have 'access all custom data' but have ACL Edit perm on the relevant custom group. (I tried adding View perm too, in case Edit no longer includes View, but this didn't help.) Here's an example of what I'm getting for $query in CRM_Core_BAO_CustomField::getFields:

SELECT civicrm_custom_field.id, civicrm_custom_field.label,
                            civicrm_custom_group.title,
                            civicrm_custom_field.data_type, civicrm_custom_field.html_type,
                            civicrm_custom_field.options_per_line,
                            civicrm_custom_group.extends, civicrm_custom_field.is_search_range,
                            civicrm_custom_group.extends_entity_column_value,
                            civicrm_custom_group.extends_entity_column_id,
                            civicrm_custom_field.is_view,
                            civicrm_custom_field.option_group_id,
                            civicrm_custom_field.date_format,
                            civicrm_custom_field.time_format,
                            civicrm_custom_group.is_multiple
                     FROM civicrm_custom_field
                     INNER JOIN civicrm_custom_group
                     ON civicrm_custom_field.custom_group_id = civicrm_custom_group.id
                     WHERE ( 1 )  AND civicrm_custom_field.is_active = 1 AND civicrm_custom_group.is_active = 1  AND ( civicrm_custom_group.extends_entity_column_value LIKE '%*Care_Provider*%' OR civicrm_custom_group.extends_entity_column_value IS NULL ) AND   civicrm_custom_group.extends IN ( 'Organization', 'Contact'  )  AND  ( 0 )
                        ORDER BY civicrm_custom_group.weight, civicrm_custom_group.title,
                                 civicrm_custom_field.weight, civicrm_custom_field.label
(Note: ASCII 01 changed to * 'cos it breaks the forum preview.)

The "AND  ( 0 )" comes from $permissionClause. I traced this through CRM_Core_Permission::customGroupClause, CRM_Core_Permission::customGroup, CRM_ACL_API::group to CRM_ACL_BAO_ACL::group, which runs this query:

SELECT   a.operation, a.object_id
  FROM   civicrm_acl_cache c, civicrm_acl a
 WHERE   c.acl_id       =  a.id
   AND   a.is_active    =  1
   AND   a.object_table = 'civicrm_custom_group'
   AND   a.id        IN ( 2,3,4,5,6,7,50,51,52,53,54,55,56 )
ORDER BY a.object_id
...which returns nothing, because the civicrm_acl object_table values for these ids are all permission names, like 'access all custom data' - there are entries with object_table = 'civicrm_custom_group' but these have ids 60, 62, 63 & 71:

mysql> select * from civicrm_acl where object_table = 'civicrm_custom_group';
+----+---------------------------------+------+------------------+-----------+-----------+----------------------+-----------+-----------+--------+-----------+
| id | name                            | deny | entity_table     | entity_id | operation | object_table         | object_id | acl_table | acl_id | is_active |
+----+---------------------------------+------+------------------+-----------+-----------+----------------------+-----------+-----------+--------+-----------+
| 60 | EOI Section C Custom Group Edit |    0 | civicrm_acl_role |         3 | Edit      | civicrm_custom_group |         2 | NULL      |   NULL |         1 |
| 62 | EOI Section A Custom Group Edit |    0 | civicrm_acl_role |         3 | Edit      | civicrm_custom_group |         3 | NULL      |   NULL |         1 |
| 63 | EOI Section B Custom Group Edit |    0 | civicrm_acl_role |         3 | Edit      | civicrm_custom_group |         4 | NULL      |   NULL |         1 |
| 71 | EOI Section A Custom Group View |    0 | civicrm_acl_role |         3 | View      | civicrm_custom_group |         3 | NULL      |   NULL |         1 |
+----+---------------------------------+------+------------------+-----------+-----------+----------------------+-----------+-----------+--------+-----------+

But civicrm_acl_cache at this point only has acl_ids 2,3,4,5,6,7,50,51,52,53,54,55,56.

Looks as though civicrm_acl_cache is populated by the call to CRM_ACL_BAO_Cache::build earlier in CRM_ACL_BAO_ACL::group. I've verified that the call to CRM_ACL_BAO_ACL::getAllByContact in CRM_ACL_BAO_Cache::build returns results, which all come from the call to getGroupACLRoles in getGroupACLs: ids 2,3,4,5,6,7,50,51,52,53,54,55,56.

That's as far as I've got, hope you'll now be able to replicate.

Thanks,

Dave

Hi Shailesh,

Deepak has been investigating on my server & says he's found the problem & will be able to replicate.

Thanks,

Dave J