If a user clicks the "update" link in their recurring fees table, then decides not to make any changes and clicks Cancel instead of Update, they get access denied because the cancel link redirects to the admin view of recurring fees, not back to the user view. This is with the authorize.net handler, the URL in question is like the following:

example.com/user/263/recurring/715/cancel/authorizenet_cim?destination=user/263/recurring-fees

Comments

krishnasdb’s picture

This is the code I got when I am doing research, I changed my code according to the mentioned below,but it does't work for me any help!

If a user clicks the "update" link in their recurring fees table, then decides not to make any changes and clicks Cancel instead of Update, they get access denied because the cancel link redirects to the admin view of recurring fees, not back to the user view. This is with the authorize.net handler, the URL in question is like the following:

example.com/user/226/recurring/44/update/authorizenet_cim?destination=user/226/recurring-fees

In uc_recurring.uc_authorizenet.inc around lines 140-147:

  $form['submit'] = array(
    '#type' => 'submit',
    '#value' => t('Update'),
   // '#suffix' => l(t('Cancel'), 'admin/store/orders/recurring/view/fee/' . $rfid),
    '#suffix' => l(t('Cancel'), $_SERVER['HTTP_REFERER']),
  
  );

I have modified my code according to the mentioned above, but still it is not working, any help!!!

--Thanks in advance