Do Not Allow users with Donation Display permission to click [sent] or [clear] in the Tax Receipt field on a Donation record
The Donation 'Display' permission allows a user to click [sent] [clear] in the Tax Receipt field enabling them to 'edit' the record. This should not be allowed when the user group only has 'Display' permission.
12
votes
Anne Allieri
shared this idea
-
Robert Gines commented
Security issue - view only users have Edit access!
-
Elizabeth Pritchard
commented
The way it is now, it compromises the integrity of the database.