From: Dave Greenberg <dave@civicrm.org>
Date: Thu, 26 Feb 2015 23:32:17 +0000 (-0800)
Subject: CRM-13901 - Fix unintentional suppression of Membership Dashboard Summary table for... 
X-Git-Url: https://vcs.fsf.org/?a=commitdiff_plain;h=feead5e7a46d656067d5256a362c9adb7201edb6;p=civicrm-core.git

CRM-13901 - Fix unintentional suppression of Membership Dashboard Summary table for users with view all contacts permission.

----------------------------------------
* CRM-13901: Suppress Membership Dashboard for contacts who may not see all users as it contains info about members they are blocked from
  https://issues.civicrm.org/jira/browse/CRM-13901
---

diff --git a/CRM/Member/Page/DashBoard.php b/CRM/Member/Page/DashBoard.php
index 8186bcb800..7da628405e 100644
--- a/CRM/Member/Page/DashBoard.php
+++ b/CRM/Member/Page/DashBoard.php
@@ -49,7 +49,7 @@ class CRM_Member_Page_DashBoard extends CRM_Core_Page {
     //CRM-13901 don't show dashboard to contacts with limited view writes & it does not relect
     //what they have access to
     //@todo implement acls on dashboard querys (preferably via api to enhance that at the same time)
-    if (!CRM_Core_Permission::check(array('view all contacts', 'edit all contacts'))) {
+    if (!CRM_Core_Permission::check('view all contacts') && !CRM_Core_Permission::check('edit all contacts')) {
       $this->showMembershipSummary = FALSE;
       $this->assign('membershipSummary', FALSE);
       return;