CiviCRM Community Forums (archive)

*

News:

Have a question about CiviCRM?
Get it answered quickly at the new
CiviCRM Stack Exchange Q+A site

This forum was archived on 25 November 2017. Learn more.
How to get involved.
What to do if you think you've found a bug.



  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Developer Discussion (Moderator: Donald Lobo) »
  • Disable relationship button on user dashboard can lead to an access denied
Pages: [1]

Author Topic: Disable relationship button on user dashboard can lead to an access denied  (Read 926 times)

dpolant

  • I’m new here
  • *
  • Posts: 7
  • Karma: 1
Disable relationship button on user dashboard can lead to an access denied
November 05, 2010, 11:13:43 am
Version: 3.2 latest
Platform: Drupal pressflow 6.19

On one of our sites we grant basic authenticated users the "access contact dashboard" permission but not "access civicrm." We want these users to be able to join groups and disable relationships from the contact dashboard. We don't want to give them full "access civicrm" privileges though. Joining/leaving groups works fine from the dashboard because it targets the civicrm/user/* url. Disabling a relationship however targets civicrm/contact/view/* and requires "access civicrm" permission status.

It seems like actions that originate on the contact dashboard should have "access contact dashboard" permission checks not "access civicrm". Join/leave group does, but disable relationship checks for "access civicrm" instead.

Seems like these permissions should be made consistent in the next version. But let me know if there is a way to configure permissions so that I don't run into this problem for now ...

Pages: [1]
  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Developer Discussion (Moderator: Donald Lobo) »
  • Disable relationship button on user dashboard can lead to an access denied

This forum was archived on 2017-11-26.