From 3ea6ec7d5a47113bc14b28cd9760bab2e732c801 Mon Sep 17 00:00:00 2001 From: eileen Date: Mon, 2 Sep 2019 17:30:20 +1200 Subject: [PATCH] Loosen permissions to Dedupe.getstatistics api This api should have the same level of permission as Dedupe.getduplicates - it gets data about cached duplicates. Note that getduplicates has 'access CiviCRM' & relys on ACLs to restrict which contacts can be accessed through it --- CRM/Core/Permission.php | 1 + 1 file changed, 1 insertion(+) diff --git a/CRM/Core/Permission.php b/CRM/Core/Permission.php index 0e2a3c16af..92a7a7eeea 100644 --- a/CRM/Core/Permission.php +++ b/CRM/Core/Permission.php @@ -976,6 +976,7 @@ class CRM_Core_Permission { $permissions['dedupe'] = [ 'getduplicates' => ['access CiviCRM'], + 'getstatistics' => ['access CiviCRM'], ]; // CRM-16963 - Permissions for country. -- 2.25.1