CiviCRM Community Forums (archive)

We made a permissions mistake that may have revealed a CiviCRM bug. We set anonymous users to be able to "access civiEvent" and, sure enough, we were able to manage events and see the "configure" link while logged out. The odd thing is that we were NOT able to edit events while logged in -- even though authenticated users also had "access civiEvent" checked. If an authenticated user clicked on "configure," the table of event settings loaded (fees, tell a friend, etc.), but clicking on one of these event settings gave a set of tabs that were empty, as in the screen capture below.

By removing access to civiEvent from anonymous users, we correctly protected those pages from people not logged in, but also authenticated users were once more able to edit the event. So the result is as it should be now, but this doesn't explain why authenticated users were blocked from configuring events by the permission setting for anonymous ones. A bug?