Checksum is not considered for validating users to view CiviCRM views

Created on 6 May 2023, about 1 year ago

Updated 13 May 2024, about 1 month ago

Problem/Motivation

Steps to reproduce

- Create a drupal view to display civicrm contact information.
- Add Contextual filter to view based on cid in the URL.
- Set permission "Role = authenticated user" to access this view.
- When the view is accessed after login, the view is displayed correctly.
- When the view is accessed using checksum, the view displays access denied.

Proposed resolution

- Add a new permission type, eg CiviCRM Checksum?

Remaining tasks

Luke is currently working on it. We should see a PR on the repo soon.

User interface changes

Drupal View -> Page Settings -> Access section should have a new option for "CiviCRM Entity: Contact Checksum" to ensure user can access the view using the checksum too.

✨ Feature request

Status

Fixed

Component

Miscellaneous

Created by

🇮🇳India jitendrapurohit

Live updates comments and jobs are added and updated live.

Comments & Activities

Issue created by @jitendrapurohit
Comment about 1 year ago →
luke.stewart
https://github.com/eileenmcnaughton/civicrm_entity/pull/425

I've applied the patch against the 4.x version, and tested - originally written for d9 with 3.x version seems to work fine on D10.

I've left in some logging - that perhaps should be removed.
Comment about 2 months ago →
🇺🇸United States markusa
We merged this: https://github.com/eileenmcnaughton/civicrm_entity/pull/478
Status changed to Fixed about 2 months ago9:42pm 29 April 2024
Comment about 2 months ago →
🇺🇸United States markusa
Comment about 1 month ago →
System Message
Automatically closed - issue fixed for 2 weeks with no activity.

contrib.social Blog FAQ Discussions

Production build 0.69.0 2024