dev/core#2752 Allow financial_trxns to be viewed
authorEileen McNaughton <emcnaughton@wikimedia.org>
Wed, 18 Aug 2021 21:18:05 +0000 (09:18 +1200)
committerEileen McNaughton <emcnaughton@wikimedia.org>
Wed, 5 Jan 2022 05:31:36 +0000 (18:31 +1300)
Per https://lab.civicrm.org/dev/core/-/issues/2752 this allows non admins to
see payment details in search for contributions they can see.
I only added for 'get' because I didn't want to loosen 'delete'
(in particular) and this was the minimum extra to achieve
search access

CRM/Core/Permission.php

index 07eb1abf13ed4f8c1c05edb98868a7aec109e18e..256efae2084c1bd281520f1836d43cdaed5aab6a 100644 (file)
@@ -1145,6 +1145,7 @@ class CRM_Core_Permission {
     $permissions['financial_type']['get'] = $permissions['contribution']['get'];
     $permissions['entity_financial_account']['get'] = $permissions['contribution']['get'];
     $permissions['financial_account']['get'] = $permissions['contribution']['get'];
+    $permissions['financial_trxn']['get'] = $permissions['contribution']['get'];
 
     // Payment permissions
     $permissions['payment'] = [