CiviCRM Community Forums (archive)

*

News:

Have a question about CiviCRM?
Get it answered quickly at the new
CiviCRM Stack Exchange Q+A site
This forum was archived on 25 November 2017. Learn more.
How to get involved.
What to do if you think you've found a bug.



  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Support »
  • Using CiviCRM »
  • Using Profiles (Moderator: Dave Greenberg) »
  • [Resolved] Users can change other users' profiles
Pages: [1]

Author Topic: [Resolved] Users can change other users' profiles  (Read 858 times)

davyivins

  • I post occasionally
  • **
  • Posts: 119
  • Karma: 2
    • PURCO SA
  • CiviCRM version: 4.5
  • CMS version: Drupal 6.33
  • MySQL version: 5.5.34
  • PHP version: 5.4.33
[Resolved] Users can change other users' profiles
May 28, 2012, 05:01:37 am
Hi all - I'm tearing my hair out and expect I'm doing something stupid  :-)

I've created a Profile that allows users to edit their Individual/Contact data via their Drupal user account.

BUT - to make the profile accessible I need to give the user permission to "Edit all Contacts" - which allows the user to access and edit other users' details simply by changing the user id in the page URL.

What am I doing wrong?

The permissions I've allocated are:

User module
 - access user profiles
 - administer users

Civicrm
 - Edit all contacts
 - profile view
 - profile listings

Many thanks
Davy
« Last Edit: May 29, 2012, 01:16:46 am by davyivins »
There are times I love technology...and then there are times I *love* technology :-)

petednz

  • Forum Godess / God
  • I’m (like) Lobo ;)
  • *****
  • Posts: 4899
  • Karma: 193
    • Fuzion
  • CiviCRM version: 3.x - 4.x
  • CMS version: Drupal 6 and 7
Re: Users can change other users' profiles !
May 28, 2012, 12:46:55 pm
"edit all contacts" is not a permission to hand out to everyone

there should be permissions for 'view' and to 'edit' profiles.

hope that helps
Sign up to StackExchange and get free expert advice: https://civicrm.org/blogs/colemanw/get-exclusive-access-free-expert-help

pete davis : www.fuzion.co.nz : connect + campaign + communicate

davyivins

  • I post occasionally
  • **
  • Posts: 119
  • Karma: 2
    • PURCO SA
  • CiviCRM version: 4.5
  • CMS version: Drupal 6.33
  • MySQL version: 5.5.34
  • PHP version: 5.4.33
Re: Users can change other users' profiles !
May 29, 2012, 01:16:11 am
Thanks Pete
That's fixed it - not sure what I was thinking yesterday :-)

There are times I love technology...and then there are times I *love* technology :-)

petednz

  • Forum Godess / God
  • I’m (like) Lobo ;)
  • *****
  • Posts: 4899
  • Karma: 193
    • Fuzion
  • CiviCRM version: 3.x - 4.x
  • CMS version: Drupal 6 and 7
Re: [Resolved] Users can change other users' profiles
May 29, 2012, 01:18:19 am
no probs - yesterdays can be like that
Sign up to StackExchange and get free expert advice: https://civicrm.org/blogs/colemanw/get-exclusive-access-free-expert-help

pete davis : www.fuzion.co.nz : connect + campaign + communicate
Pages: [1]
  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Support »
  • Using CiviCRM »
  • Using Profiles (Moderator: Dave Greenberg) »
  • [Resolved] Users can change other users' profiles

This forum was archived on 2017-11-26.