CiviCRM Community Forums (archive)

The user has permissions of access CiviCRM and access AJAX API and I've added

function dog_reference_civicrm_alterAPIPermissions($entity, $action, &$params, &$permissions){
       
    if($entity == 'Dog'){
        $params['check_permissions'] = false;
    }
}

to a custom module.

When the user causes an Ajax call to a custom extension api get, he gets the error "API permission check failed for Dog/get call; insufficient permission: require administer CiviCRM".

This works ok for an admin user.

The call is CRM.api('Dog', 'get', {'sequential': 1, 'type': 'all', 'dog_name':cj("#type_dog_name").val()})

Is  dog_reference_civicrm_alterAPIPermissions ever called?

Instead of using check_permission (the check permission might be overrided later to force true?) , you should set the permission you want (access CiviCRM?)


function dog_reference_civicrm_alterAPIPermissions($entity, $action, &$params, &$permissions)
{
    $permissions['dog']['get'] = array('access CiviCRM');
    $permissions['dog']['delete'] = array('admininster CiviCRM');
    $permissions['dog']['create'] = array('add contacts');
//whatever.
}

dog_reference_civicrm_alterAPIPermissions is called.

That was it. I ended up using $permissions['dog']['get'] = array('access AJAX API');