From fb95617139ef2f5c6c6d7266517f6e4b7afc88d5 Mon Sep 17 00:00:00 2001 From: Eileen McNaughton Date: Mon, 5 Jun 2023 13:41:55 +1200 Subject: [PATCH] Use PriceSet permissions for related entities This addresses a situation where price set permissions are looser than the associated fields, values & linkages to events & contribution pages --- CRM/Core/Permission.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CRM/Core/Permission.php b/CRM/Core/Permission.php index f22ec7e73e..d0d59bae4b 100644 --- a/CRM/Core/Permission.php +++ b/CRM/Core/Permission.php @@ -1245,7 +1245,7 @@ class CRM_Core_Permission { ]; // Price sets are shared by several components, user needs access to at least one of them - $permissions['price_set'] = [ + $permissions['price_set'] = $permissions['price_field'] = $permissions['price_field_value'] = $permissions['price_set_entity'] = [ 'default' => [ ['access CiviEvent', 'access CiviContribute', 'access CiviMember'], ], -- 2.25.1