CiviCRM Community Forums (archive)

Hi

We've been doing some work with Dru Yoga and recurring contributions.
This is a Civi 4.3.x site and Drupal 7.

When someone creates an online recurring contribution, in the automated receipt, they get a checksum link to
$updateSubscriptionBillingUrl
$cancelSubscriptionUrl
In the received email this generates an email link like - https://example.com/index.php?q=civicrm/contribute/unsubscribe&reset=1&mid=1460&cs=2ecfe7e01d4e0b87233874b6dd146d_1391599382_inf.
The user can then use these two links to cancel their recurring contribution or update the billing info.

However if the user logs in it would be great if they could also then cancel their own recurring contribution using the same link minus the checksum.
i.e. https://example.com/index.php?q=civicrm/contribute/unsubscribe&reset=1&mid=1460
We could generate this link using using Drupal Views etc on the Civi Contact Dashboard.

When we try logging in as the user and accessing the link (https://example.com/index.php?q=civicrm/contribute/unsubscribe&reset=1&mid=1460) the user gets a 'you don't have permission' message.
But the site admin can cancel using this link.

We think it would be great if logged in members could control their recurring contributions.
As a starting point does anyone know which Civi permission is needed and whether a new permission will have to be created before this could work safely?

Cheers
Olly