Possible regression - require 'make online contribution' to edit contributions after upgrading to 5.29 rc w security
Last night it was reported that staff who had 'edit contributions' but not 'make online contributions' could not 'edit contributions' after upgrading from 5.26 to 5.29 (rc-security). I haven't established yet what 'can't edit means as I could only replicate locally 'can't cancel recurring' and I couldn't see how that might have changed.
I will ask more questions of the 'couldn't edit'-ors but it to the extent it relates to the recurring contribution forms I note - the forms started out as front-end-forms so
civicrm/contribute/unsubscribe Cancel Subscription CRM_Contribute_Form_CancelSubscription make online contributions trueWould be appropriate there.
Because the forms double up as back office forms we have never added is_public which intermittently comes up as a theming issue.
One option would be to have separate front end & back end urls so we would
- add is_public => TRUE to the existing entry
- add a second entry like
And update the backoffice urls to point to that.