Answers.Body: <p>The first url you list is an iATS-specific, internal admin-only url for managing cards on file, not something that you would ever give to a client or donor.</p>
  <p>The second one looks like it might be one that you're generating yourself. I noticed in my testing that the anonymous-access links for updating your credit card in the invoice now no longer have a crid parameter, but instead an oid parameter (corresponding to the contribution id).</p>
  <p>An authenticated unprivileged user in their own dashboard will get a url to edit their billing information that looks like your second url without the checksum.</p>
  <p>I've tested all these options with the current iATS 1.7.4 and they are working on my Drupal 7 test site.</p>
  <p>Full details here: <a href="https://github.com/iATSPayments/com.iatspayments.civicrm/issues/390" rel="nofollow noreferrer">https://github.com/iATSPayments/com.iatspayments.civicrm/issues/390</a></p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2022-08-02T20:54:27.973Z
Answers.Text: Posted https://github.com/iATSPayments/com.iatspayments.civicrm/issues/390
Answers.UserDisplayName: Alan Dixon
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2022-07-29T17:31:15.290Z
Answers.LastActivityDate: 2022-08-05T18:50:52.070Z
Answers.LastEditDate: 2022-08-05T18:50:52.070Z
Answers.UserDisplayName: Alan Dixon
Body: <p>Drupal 7.91
  CiviCRM 5.51.1
  iATSPayments 1.7.4</p>
  <p>Our donors do not have the ability to update their credit card on file. They have the &quot;View&quot; link but not the edit.</p>
  <p>I checked the settings in /civicrm/admin/contribute/iatssettings and the 3 enable self-service boxes are checked.
  I looked at the Drupal permissions. The CiviContribute: edit contributions was not enabled for Donors. I checked that box, flushed cache, but they still do not see the Edit link.</p>
  <p>I checked my css to see if I had hidden that link. It also does not show as hidden in Chrome Inspector.</p>
  <p>I tried several urls but get access denied messages
  <a href="https://secure.radiusinternational.org/civicrm/contact/edit/iatscustomerlink?reset=1&amp;cid=11482&amp;customerCode=%7BiATS" rel="nofollow noreferrer">https://secure.radiusinternational.org/civicrm/contact/edit/iatscustomerlink?reset=1&amp;cid=11482&amp;customerCode={iATS</a> Code}&amp;paymentProcessorId=3&amp;is_test=0</p>
  <p>This one gives me a hard fail
  <a href="https://secure.radiusinternational.org/civicrm/contribute/updatebilling?reset=1&amp;crid=964&amp;cs=%7Bcontact.checksum%7D" rel="nofollow noreferrer">https://secure.radiusinternational.org/civicrm/contribute/updatebilling?reset=1&amp;crid=964&amp;cs={contact.checksum}</a></p>
  <p>Any ideas what I am missing?</p>
  
Tags: <iatspayments>
Title: Donors cannot update credit card info with iATSPayments?
ThreadText: # Donors cannot update credit card info with iATSPayments?
  
  (Asked by: username_0 on 2022-07-29)
  
  Drupal 7.91
  CiviCRM 5.51.1
  iATSPayments 1.7.4
  
  Our donors do not have the ability to update their credit card on file. They have the "View" link but not the edit.
  
  I checked the settings in /civicrm/admin/contribute/iatssettings and the 3 enable self-service boxes are checked.
  I looked at the Drupal permissions. The CiviContribute: edit contributions was not enabled for Donors. I checked that box, flushed cache, but they still do not see the Edit link.
  
  I checked my css to see if I had hidden that link. It also does not show as hidden in Chrome Inspector.
  
  I tried several urls but get access denied messages
  [https://secure.radiusinternational.org/civicrm/contact/edit/iatscustomerlink?reset=1&cid=11482&customerCode={iATS](https://secure.radiusinternational.org/civicrm/contact/edit/iatscustomerlink?reset=1&cid=11482&customerCode=%7BiATS) Code}&paymentProcessorId=3&is\_test=0
  
  This one gives me a hard fail
  [https://secure.radiusinternational.org/civicrm/contribute/updatebilling?reset=1&crid=964&cs={contact.checksum}](https://secure.radiusinternational.org/civicrm/contribute/updatebilling?reset=1&crid=964&cs=%7Bcontact.checksum%7D)
  
  Any ideas what I am missing?
  
  **Tags:** iatspayments
  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_1 on 2022-07-29. Score: 1 | Accepted answer
  
  The first url you list is an iATS-specific, internal admin-only url for managing cards on file, not something that you would ever give to a client or donor.
  
  The second one looks like it might be one that you're generating yourself. I noticed in my testing that the anonymous-access links for updating your credit card in the invoice now no longer have a crid parameter, but instead an oid parameter (corresponding to the contribution id).
  
  An authenticated unprivileged user in their own dashboard will get a url to edit their billing information that looks like your second url without the checksum.
  
  I've tested all these options with the current iATS 1.7.4 and they are working on my Drupal 7 test site.
  
  Full details here: <https://github.com/iATSPayments/com.iatspayments.civicrm/issues/390>
  
  > **Comments:**
  > **username_1**: Posted https://github.com/iATSPayments/com.iatspayments.civicrm/issues/390  
  
  ---
  
  