From 9ac56a773f1ba5dc44800218f7c80db09ad756f4 Mon Sep 17 00:00:00 2001 From: Coleman Watts Date: Tue, 15 Jun 2021 02:05:09 -0400 Subject: [PATCH] Change CRUD permissions for SavedSearch and SearchDisplay to 'administer CiviCRM data' By default, the permission was previously 'administer CiviCRM'. The new permission is a subset for data administrators. --- CRM/Core/Permission.php | 4 ++++ ext/search_kit/Civi/Api4/SearchDisplay.php | 1 + 2 files changed, 5 insertions(+) diff --git a/CRM/Core/Permission.php b/CRM/Core/Permission.php index 17bfc79e9c..64282d84bd 100644 --- a/CRM/Core/Permission.php +++ b/CRM/Core/Permission.php @@ -1488,6 +1488,10 @@ class CRM_Core_Permission { ], ]; + $permissions['saved_search'] = [ + 'default' => ['administer CiviCRM data'], + ]; + // Profile permissions $permissions['profile'] = [ // the profile will take care of this diff --git a/ext/search_kit/Civi/Api4/SearchDisplay.php b/ext/search_kit/Civi/Api4/SearchDisplay.php index 3bb683ce96..fff6f151e6 100644 --- a/ext/search_kit/Civi/Api4/SearchDisplay.php +++ b/ext/search_kit/Civi/Api4/SearchDisplay.php @@ -31,6 +31,7 @@ class SearchDisplay extends Generic\DAOEntity { public static function permissions() { $permissions = parent::permissions(); + $permissions['default'] = ['administer CiviCRM data']; $permissions['run'] = []; return $permissions; } -- 2.25.1