API - Finer-grained permisions for the dashboard & dashlet entities
authorColeman Watts <coleman@civicrm.org>
Thu, 12 Nov 2020 15:23:53 +0000 (10:23 -0500)
committerColeman Watts <coleman@civicrm.org>
Thu, 12 Nov 2020 22:27:35 +0000 (17:27 -0500)
commitdfcf5ba21f60a0a9f95d01e53bd175309d8e3258
tree2cb38d2e1b6e52fc3e8e5ebee6fb6ac20db15f43
parent32aed522b73e38326c60694a32b4256150f87e30
API - Finer-grained permisions for the dashboard & dashlet entities

This allows contacts without "administer CiviCRM" permission to access these api entities.
Permissions are restricted to contacts they have access to, and write permissions are
limited to a contact only editing their own dashboard.
CRM/Contact/BAO/DashboardContact.php
CRM/Core/Permission.php