From 3e87238e56c76d99408a5b2567e858d7e7d6457e Mon Sep 17 00:00:00 2001
From: Dave Greenberg <dave@civicrm.org>
Date: Wed, 17 Jul 2013 12:54:04 -0700
Subject: [PATCH] CRM-12735 Allow user with view contact permission to access
 Actions button in Contact Summary page.

----------------------------------------
* CRM-12735:
  http://issues.civicrm.org/jira/browse/CRM-12735
---
 templates/CRM/Contact/Page/View/Summary.tpl | 47 +++++++++++----------
 1 file changed, 24 insertions(+), 23 deletions(-)

diff --git a/templates/CRM/Contact/Page/View/Summary.tpl b/templates/CRM/Contact/Page/View/Summary.tpl
index aa51c41ae2..2658f830fa 100644
--- a/templates/CRM/Contact/Page/View/Summary.tpl
+++ b/templates/CRM/Contact/Page/View/Summary.tpl
@@ -41,33 +41,34 @@
 
   <div class="crm-actions-ribbon">
       <ul id="actions">
-          {assign var='urlParams' value="reset=1"}
-          {if $searchKey}
-              {assign var='urlParams' value=$urlParams|cat:"&key=$searchKey"}
-              {/if}
-          {if $context}
-              {assign var='urlParams' value=$urlParams|cat:"&context=$context"}
-          {/if}
-
-        {* Include the Actions and Edit buttons if user has 'edit' permission and contact is NOT in trash. *}
-          {if $permission EQ 'edit' and !$isDeleted}
-        {if call_user_func(array('CRM_Core_Permission','check'), 'access CiviCRM')}
-              <li class="crm-contact-activity crm-summary-block">
-                  {include file="CRM/Contact/Page/Inline/Actions.tpl"}
-              </li>
+        {assign var='urlParams' value="reset=1"}
+        {if $searchKey}
+          {assign var='urlParams' value=$urlParams|cat:"&key=$searchKey"}
         {/if}
-        {if call_user_func(array('CRM_Core_Permission','check'), 'edit my contact')}
-              <li>
-                  {assign var='editParams' value=$urlParams|cat:"&action=update&cid=$contactId"}
-                  <a href="{crmURL p='civicrm/contact/add' q=$editParams}" class="edit button" title="{ts}Edit{/ts}">
-                  <span><div class="icon edit-icon"></div>{ts}Edit{/ts}</span>
-                  </a>
-              </li>
+        {if $context}
+          {assign var='urlParams' value=$urlParams|cat:"&context=$context"}
         {/if}
+
+        {* CRM-12735 - Conditionally include the Actions and Edit buttons if contact is NOT in trash.*}
+        {if !$isDeleted}
+          {if call_user_func(array('CRM_Core_Permission','check'), 'access CiviCRM')}
+            <li class="crm-contact-activity crm-summary-block">
+              {include file="CRM/Contact/Page/Inline/Actions.tpl"}
+            </li>
           {/if}
+          {* Include Edit button if contact has 'edit contacts' permission OR user is viewing their own contact AND has 'edit my contact' permission. (Either condition sets $permission EQ 'edit') *}
+          {if $permission EQ 'edit'}
+            <li>
+              {assign var='editParams' value=$urlParams|cat:"&action=update&cid=$contactId"}
+              <a href="{crmURL p='civicrm/contact/add' q=$editParams}" class="edit button" title="{ts}Edit{/ts}">
+              <span><div class="icon edit-icon"></div>{ts}Edit{/ts}</span>
+              </a>
+            </li>
+          {/if}
+        {/if}
 
-          {* Check for permissions to provide Restore and Delete Permanently buttons for contacts that are in the trash. *}
-          {if (call_user_func(array('CRM_Core_Permission','check'), 'access deleted contacts') and
+        {* Check for permissions to provide Restore and Delete Permanently buttons for contacts that are in the trash. *}
+        {if (call_user_func(array('CRM_Core_Permission','check'), 'access deleted contacts') and
           $is_deleted)}
               <li class="crm-contact-restore">
                   <a href="{crmURL p='civicrm/contact/view/delete' q="reset=1&cid=$contactId&restore=1"}" class="delete button" title="{ts}Restore{/ts}">
-- 
2.25.1