Access denied on price set page

Question

I have this problem

https://forum.civicrm.org/index.php?topic=36211.0

'access denied' for administrator on the price set admin page

civicrm/admin/price?reset=1&action=add

using civicrm 4.5.3 and drupal 7.33

The 'access denied' screen is a drupal screen, not an apache error. The message shows up in the 'recent log messages'.

Where should I start looking ?

Answer 1

I had a similar problem (CiviCRM 4.6) and solved it as follows:

The price sets kind of belong to the event component, and therefore they require not only "regular" CiviCRM permissions, but also access CiviEvent. Since the CiviEvent component wasn't enabled, the permissions weren't there, and the admin user didn't have them.

After enabling CiviEvent and giving CiviEvent access (in Drupal) to the administrator role it worked.

Answer 2

One solution, that I have verified as working, is to check the .htaccess file in the root Drupal folder.

As administrator, I would log in to the site, navigate to CiviCRM and find areas, such as price sets, profiles, even dashlets on the dashboard, were all coming up "access denied".

It would occur after a major Drupal update. What was happening, was I was navigating into (example) http://www.drupal.com, while the server was set up to http://drupal.com.

I could log in fine. But I would get the access denied issues. The reason is the Drupal update had overwritten my .htaccess file.

So, for whatever set up you have, ensure that your .htaccess corresponds.

From the .htaccess file, located in your root Drupal folder (use your server control panel, or an ftp client to see the file):

  # If your site can be accessed both with and without the 'www.' prefix, you
  # can use one of the following settings to redirect users to your preferred
  # URL, either WITH or WITHOUT the 'www.' prefix. Choose ONLY one option:
  #
  # To redirect all users to access the site WITH the 'www.' prefix,
  # (http://example.com/... will be redirected to http://www.example.com/...)
  # uncomment the following:
  # RewriteCond %{HTTP_HOST} .
  # RewriteCond %{HTTP_HOST} !^www\. [NC]
  # RewriteRule ^ http%{ENV:protossl}://www.%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
  #
  # To redirect all users to access the site WITHOUT the 'www.' prefix,
  # (http://www.example.com/... will be redirected to http://example.com/...)
  # uncomment the following:
   RewriteCond %{HTTP_HOST} ^www\.(.+)$ [NC]
   RewriteRule ^ http%{ENV:protossl}://%1%{REQUEST_URI} [L,R=301]

Originally, the last two lines of the above .htaccess file were # out.

1. I removed the #.
2. Refreshed my browser.
3. Re-logged in.

Result: all the "access denied" errors are gone.

You will have to select the correct option for your server settings.

Hope it helps!

Answer 3

please have a look at

Administer -> Users and Permissions -> Access Control -> Drupal Access Control

you will find all the user access right available for the user