Role Based ACL Not Working With Smart Groups
After a recent upgrade to CiviCRM 5.10.0 under Wordpress 5.0.3 I discovered that Role Based ACLs could no longer see contacts when their role gives them access to a Smart Group (static groups still work properly). This seems to be a recurrence of an issue that pops up from time to time, but previous patches I have found do not resolve the issue. These did work under 5.9.0 (I tested a clean install with sample data) and do not under 5.10.0 (again I tested on a clean install with sample data). So some change between 5.9.0 and 5.10.0 caused this. I have also confirmed that 5.10.1 has the same issue. I do not know if this affects other CMS platforms, I have only tested on Wordpress.
To recreate:
- Set Up a View or Edit ACL for A group of contacts and select a Smart Group
- Log in as a contact that is connected to the role connected to that ACL
- Do a basic search with no criteria. If the contact is in the Smart Group you will see only them, if they aren't then you will get no results. Normally you should see the whole group.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information