Author Topic: Relationship tab and without "view all contacts" permission (Read 544 times)

francescbassas · January 19, 2015, 03:09:29 pm

We upgrade recently CiviCRM from 4.4.6 to 4.5.5 and the users without "view all contacts permissions" are getting a DataTables warning message when they open relationship tab.

I have been researching a bit and I found that the problem is given because ajax callback civicrm/ajax/contactrelationships is set to "view all contacts" permission in civicrm_menu table.

If we set the value of access_arguments field to 'a:2:{i:0;a:1:{i:0;s:14:"access CiviCRM";}i:1;s:3:"and";}' the error disappears. But I'm not sure if this is a correct patch to this problem.

Can anyone lend me a hand?

Coleman Watts · January 19, 2015, 04:47:03 pm

Probably that is part of the right fix, and the other part would be to check for permission to view the specific contact in question within the ajax callback.

francescbassas · January 20, 2015, 12:53:22 am

Thanks Coleman

I think this check you mention is out of my abilities. I opened an issue https://issues.civicrm.org/jira/browse/CRM-15845 so that the experts do the rest.

CiviCRM Community Forums (archive)

News:

Author Topic: Relationship tab and without "view all contacts" permission (Read 544 times)

francescbassas

Relationship tab and without "view all contacts" permission

Coleman Watts

Re: Relationship tab and without "view all contacts" permission

francescbassas

Re: Relationship tab and without "view all contacts" permission