Clicking on credit card status in Fundraising allows users to access all tabs in Administration.

Question

Clicking on credit card status: Denied, Captured, and Expires allows users who are normally not privileged to use Administration screen to view and (if not otherwise blocked from editing) edit all admin section data.

Comments

Will add Admin user rights to fundraising. Will post here when updated.

Answer 1

It only shows CC info if the user has admin rights or Show CC. Users without rights do not see CC info. Am not sure if it was always like this or added in 2016.

Comments

I don't understand this answer.

Please explain in re: my original question: if a user is allowed to see what is in the credit card tab in admin (by clicking on credit card status in main screen) how can they be blocked from visiting the other admin screens. User Rights is greyed out but the other tabs are live.

---

It seems like you are missing the records for setting the user rights in the administration screen. We added to the latest update that it will check if you are missing the records, and if its missing it will add it for you.

---

Upgraded Fundraising to 3/25/2018 12:40 am

User (mglazer) has "Administration - Credit Cards" and "Main Menu - Administration."

They now can get into the credit cards (and only that) but only after asking for a password and giving them an error.

 

---

Try updating again and check if good. (Because they have no rights it gets moved from tab to tab until it gets to the Data Admin tab.)

---

Working, Thank you so much!!!