CIVI-SA-2022-03: Permission Advice

Published
2022-03-16 12:00
Written by

This is not a security vulnerability. It is a mitigation to protect against misconfiguration.

CiviCRM includes a large number of configurable permissions. Administrators may assign these permissions to various users and roles. This is powerful functionality that accommodates diverse needs, but it provides the opportunity for misconfiguration.

Misconfigurations may arise for a few reasons, such as:

I Stand With Ukraine

Published
2022-03-14 03:25
Written by

A few weeks prior to 24 February, I’d given up reading the news. It was a very happy time. Since Russia’s invasion of Ukraine, it’s been hard not to jump back into my Google news feed and periodically check in at NPR. Given the rise of misinformation over the past few years, it’s hard to know what is accurate and what isn’t, so much of what I read I take with a grain of salt.

8 people liked this (login to vote or to comment)

0.15

Release Date
Release Version
0.15
Release Status
Stable
Release CiviCRM Compatibility
XML
<?xml version="1.0"?>
<extension key="finsburypark" type="module">
<file>finsburypark</file>
<name>Finsbury Park Theme</name>
<description>Lightweight cross-CMS CiviCRM admin theme.</description>
<license>AGPL-3.0</license>
<maintainer>
<author>Nicol Wistreich</author>
<email>nic@visuali.st</email>
</maintainer>
<urls>
<url desc="Main Extension Page">https://lab.civicrm.org/extensions/finsburypark</url>
<url desc="Support">https://visuali.st</url>
<url desc="Licensing">http://www.gnu.org/licenses/agpl-3.0.html</url>
</urls>
<releaseDate>2021-25-11</releaseDate>
<version>0.15</version>
<develStage>beta</develStage>
<compatibility>
<ver>5.0</ver>
</compatibility>
<comments>A cross-CMS CiviCRM admin theme.</comments>
<classloader>
<psr4 prefix="Civi\" path="Civi"/>
</classloader>
<civix>
<namespace>CRM/Finsburypark</namespace>
</civix>
</extension>