In order to upgrade CiviCRM we need to do a bunch of testing.
I tested mailings: http://d6-association.drupal.org/civicrm/mailing/send?reset=1 sent to Victims mailing list
groups listings: http://d6-association.drupal.org/civicrm/group/search?reset=1&force=1&co...
searches: http://d6-association.drupal.org/civicrm/group/search?_qf_Basic_display=...
memberships: http://d6-association.drupal.org/civicrm/contribute/transact?reset=1&id=1
memberships directories: http://d6-association.drupal.org/civicrm/profile?reset=1&force=1&gid=4&s...
update association.drupal.org profiles linked to civicrm profiles: http://d6-association.drupal.org/user/67/edit/Organization%20membership

That should help in future testing. We also found http://issues.civicrm.org/jira/browse/CRM-4717

Comments

deviantintegral’s picture

deviantintegral commented

The live site is now upgraded to CiviCRM 2.2.7.

Amazon’s picture

Amazon commented
Assigned: Unassigned » Amazon
Status: Active » Fixed
petednz’s picture

petednz commented

Do you want to restrict access so random people like me can't click through to civimail with what looks like the potential to send stuff - or is it more locked down that it seems?

deviantintegral’s picture

deviantintegral commented
Status: Fixed » Active

Thanks for the note; I don't think that's a result of 2.2.7, but I'll check with Amazon on IRC.

Amazon’s picture

Amazon commented
Status: Active » Fixed

Hi, thanks for pointing out that civimail was accessible. I am not sure why the permissions for CiviMail were accessible to anonymous users, but I've since corrected it. No other access to CiviCRM capabilities were exposed.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

Project: Drupal.org infrastructure » Drupal Association Project(s)
Component: association.drupal.org » Other