Author Topic: How to check current user's authority inside a hook (Read 4061 times)

SarahG (FountainTribe) · March 02, 2011, 07:43:36 am

I am working on a hook that adds an additional tab to the contact summary screen. The hook is working fine. But I would like to add authority restrictions that check if the active user has authority to "civicontribute" and "civipledge" and only display the tab to authorized users.

Within my hook, how can I get the current user?

Thanks,
Sarah

Eileen · March 02, 2011, 12:24:45 pm

To get CMS user from contact ID (using v3 api)

http://svn.civicrm.org/civicrm/trunk/api/v3/examples/UFMatchGet.php

Or you can use the Drupal function to get logged in user
off -the top of my head
global $user;
$userid = $user->uid;

Hershel · March 03, 2011, 12:41:30 am

If the 'url' member of the array of the tab in hook_civicrm_tabs points to a custom URL that you created in the module, then you should be able to simply use

Code: [Select]

'access arguments' => array('civicontribute','civipledge'),
in the array for that menu item.

Please let me know if this fails.

SarahG (FountainTribe) · March 21, 2011, 06:11:13 pm

I added the following to the menu-related XML:
<access_arguments>access CiviContribute</access_arguments>

This works in the sense that the user cannot see the financial data when they do not have enough authority. However, they still see the tab on the contact record.

The current user experience is that they see my custom tab, and can click on it. They do not see any information after clicking because they are not authorized. This is confusing to the user. I would prefer that they do not see the tab at all if they are not authorized.

Thanks,

Hershel · March 22, 2011, 03:45:43 am

I don't quite follow the issue here. If you are using hook_civicrm_tabs, why don't you just check the user permissions there?

SarahG (FountainTribe) · March 23, 2011, 03:36:42 am

I would like to check the user permissions in my hook, but I am struggling to find the right API function to call to determine if the current user is authorized to CiviContribute.

I can figure out the current user id, as well as their current roles, but that is not helping me determine if they have permission to use CiviContribute or not.

Hershel · March 23, 2011, 04:02:27 am

http://api.drupal.org/api/drupal/modules--user--user.module/function/user_access/6

That's the top page in Google for "drupal check user permissions"

SarahG (FountainTribe) · March 23, 2011, 04:36:33 am

That did the trick in my Drupal+CiviCRM install. Any ideas on making this CMS-neutral? Or at least making sure this does not blow up running under Joomla+CiviCRM?

Thanks,

Hershel · March 23, 2011, 04:39:17 am

This will generate an error in Joomla but I have no idea how to check user permissions in Joomla. I would suggest you start a new thread what that specific question.

Donald Lobo · March 23, 2011, 07:06:13 am

in civi 3.x and prior, we ignore joomla permissions

lobo

CiviCRM Community Forums (archive)

News:

Author Topic: How to check current user's authority inside a hook (Read 4061 times)

SarahG (FountainTribe)

How to check current user's authority inside a hook

Eileen

Re: How to check current user's authority inside a hook

Hershel

Re: How to check current user's authority inside a hook

SarahG (FountainTribe)

Re: How to check current user's authority inside a hook

Hershel

Re: How to check current user's authority inside a hook

SarahG (FountainTribe)

Re: How to check current user's authority inside a hook

Hershel

Re: How to check current user's authority inside a hook

SarahG (FountainTribe)

Re: How to check current user's authority inside a hook

Hershel

Re: How to check current user's authority inside a hook

Donald Lobo

Re: How to check current user's authority inside a hook