Skip to content

fixes #425 - fix api permissions for non-permissioned users

JonGold requested to merge JonGold/stripe:fix-ajax-api into master

This should be easy enough to replicate - try to submit a Stripe payment as an anonymous user who has neither "Access CiviCRM and backend" or "Access AJAX API" permissions. You should get an "Unknown Error" in Sweetalert with a corresponding 403 error in the browser dev tools' Network tab. This patch should fix it.

Merge request reports