Answers.Body: <p>Hmm, this sounds similar to the access problems we once had for users not able to change amount or update details of the recur payment.</p>
  
  <p>Not sure if it exactly matches with your use-case, can you try applying <a href="https://gist.github.com/jitendrapurohit/8e445fd869595411ee12e0a1345a6d12" rel="nofollow noreferrer">https://gist.github.com/jitendrapurohit/8e445fd869595411ee12e0a1345a6d12</a> on your site and confirm if it works for you?</p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2019-06-10T11:13:28.687Z
Answers.LastActivityDate: 2019-06-10T11:13:28.687Z
Answers.UserDisplayName: jitendra - fuzion
Body: <p>I am attempting to create a Drupal view/block to embed in a panel, so a user can see their current membership details when they log in (beginning date/end date/type) etc. I have this overriding the default user page. That's working.</p>
  
  <p>What <strong>is not</strong> working great - is creating an "Actions" field in the view that contains links to cancel, update the card, or change the amount of the recurring series.</p>
  
  <p>I ripped the URL's from the receipt template:</p>
  
  <p>i.e. civicrm/contribute/unsubscribe?reset=1&amp;coid=XXXXX  </p>
  
  <p>And then used a view to find the recurring contribution for the membership, and then used a 'views field view' (a child-view) to get the contribution ID, which actually creates these links.</p>
  
  <p>So, I have arrived at a working link such as the above:
  civicrm/contribute/unsubscribe?reset=1&amp;coid=XXXXX  when I click it for myself (admin user) it works, but when I log in as a test user it will say "You do not have permission to cancel this recurring contribution".</p>
  
  <p>I've gone through the checklist of permissions - enabled self-service via the iATS admin tool, as well as given the user permission to make online contributions. I've also updated the code suggested here: <a href="https://civicrm.stackexchange.com/questions/25446/only-logged-in-users-can-change-billing-and-recurring-amount">Only logged in users can change billing and recurring amount</a></p>
  
  <p>Over on this exchange (<a href="https://civicrm.stackexchange.com/questions/19575/donor-access-to-edit-recurring-donations">Donor access to edit recurring donations</a>) it seems like a contact checksum must also be embedded. Does this mean that my project is out of luck, that we can only generate these links from the context of civi? In views we can generate the contact hash, but that seems dangerous/not the same thing.</p>
  
  <p>I am assuming the civi dashboard for users is kind of ugly and has some permissions limitations, so I was really trying to use views/drupal to generate this functionality.</p>
  
  <p>Please let me know, happy to share my work! The workflow we want is - users log in, see their memberships, can do actions upon those memberships (seems obvious, right?)</p>
  
  <p>I also found this - <a href="https://github.com/MegaphoneJon/com.megaphonetech.checksums" rel="nofollow noreferrer">https://github.com/MegaphoneJon/com.megaphonetech.checksums</a>  but making the link from views is currently beyond my capacity.</p>
  
  <p>update: It seems like the "Edit Contributions" permissions would allow them to do it. Also seems dangerous. I messsed around and put in different contact/contribution ids and tried to load various civi pages, it seemed to throw access denied..so hmm?</p>
  
Tags: <civimember><recurring-contributions><iats>
Title: Change Recurring Contribution Details from Views/Drupal
ThreadText: # Change Recurring Contribution Details from Views/Drupal
  
  (Asked by: username_0 on 2019-06-06)
  
  I am attempting to create a Drupal view/block to embed in a panel, so a user can see their current membership details when they log in (beginning date/end date/type) etc. I have this overriding the default user page. That's working.
  
  What **is not** working great - is creating an "Actions" field in the view that contains links to cancel, update the card, or change the amount of the recurring series.
  
  I ripped the URL's from the receipt template:
  
  i.e. civicrm/contribute/unsubscribe?reset=1&coid=XXXXX
  
  And then used a view to find the recurring contribution for the membership, and then used a 'views field view' (a child-view) to get the contribution ID, which actually creates these links.
  
  So, I have arrived at a working link such as the above:
  civicrm/contribute/unsubscribe?reset=1&coid=XXXXX when I click it for myself (admin user) it works, but when I log in as a test user it will say "You do not have permission to cancel this recurring contribution".
  
  I've gone through the checklist of permissions - enabled self-service via the iATS admin tool, as well as given the user permission to make online contributions. I've also updated the code suggested here: [Only logged in users can change billing and recurring amount](https://civicrm.stackexchange.com/questions/25446/only-logged-in-users-can-change-billing-and-recurring-amount)
  
  Over on this exchange ([Donor access to edit recurring donations](https://civicrm.stackexchange.com/questions/19575/donor-access-to-edit-recurring-donations)) it seems like a contact checksum must also be embedded. Does this mean that my project is out of luck, that we can only generate these links from the context of civi? In views we can generate the contact hash, but that seems dangerous/not the same thing.
  
  I am assuming the civi dashboard for users is kind of ugly and has some permissions limitations, so I was really trying to use views/drupal to generate this functionality.
  
  Please let me know, happy to share my work! The workflow we want is - users log in, see their memberships, can do actions upon those memberships (seems obvious, right?)
  
  I also found this - <https://github.com/MegaphoneJon/com.megaphonetech.checksums> but making the link from views is currently beyond my capacity.
  
  update: It seems like the "Edit Contributions" permissions would allow them to do it. Also seems dangerous. I messsed around and put in different contact/contribution ids and tried to load various civi pages, it seemed to throw access denied..so hmm?
  
  **Tags:** civimember, recurring-contributions, iats
  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_1 on 2019-06-10. Score: 1
  
  Hmm, this sounds similar to the access problems we once had for users not able to change amount or update details of the recur payment.
  
  Not sure if it exactly matches with your use-case, can you try applying <https://gist.github.com/jitendrapurohit/8e445fd869595411ee12e0a1345a6d12> on your site and confirm if it works for you?
  
  
  ---
  
  