Body: <p>This seems like a weird case that probably doesn't come up much, but it does seem to indicate something odd is happening.</p>
  <p>If you are logged and click on a link for a Drupal webform with contact and hash tokens that are for another contact (for instance to test that link), then any activities you do in CiviCRM will be attached to that contact. So, if you create a group, it will say that other contact created the group or if you merge two contacts, it will say that other contact merged the contacts, etc.
  This is fixed by logging out and back in again (and of course could be avoided by testing the link in an incognito window). Note that this does not require you to submit the webform, merely to load the webform page with the tokenized link.</p>
  <p>I'm guessing this isn't something that is worth trying to track down, but thought I should put it here just in case.</p>
  
Comments.ContentLicense: CC BY-SA 4.0
Comments.CreationDate: 2020-06-18T20:54:34.410Z
Comments.Text: I always use incognito to test a checksum as otherwise i would not be confident of my testing. i take you are saying 'i am logged in, i get a checksum link for another user and click that while logged in, then odd things happen'. if so i can only suggest to test checksums incognito or via another browser / 'people' (in the chrome sense)
Comments.UserDisplayName: petednz - fuzion
Comments.ContentLicense: CC BY-SA 4.0
Comments.CreationDate: 2020-06-19T02:18:24.333Z
Comments.Text: Absolutely, that's what I would normally do (test in incognito), I just thought it was worth noting here as it doesn't seem like expected behaviour (that activities would be assigned to a different contact than the one that actually was logged in to perform them).
Comments.UserDisplayName: Lars SG
Comments.ContentLicense: CC BY-SA 4.0
Comments.CreationDate: 2020-06-19T09:40:10.007Z
Comments.Text: yep seems like something is clearly amiss - good reporting
Comments.UserDisplayName: petednz - fuzion
Tags: <webform-civicrm><tokens>
Title: Clicking a tokenized link for another contact leads to your activities being recorded as belonging to that user
ThreadText: # Clicking a tokenized link for another contact leads to your activities being recorded as belonging to that user
  
  (Asked by: username_0 on 2020-06-18)
  
  This seems like a weird case that probably doesn't come up much, but it does seem to indicate something odd is happening.
  
  If you are logged and click on a link for a Drupal webform with contact and hash tokens that are for another contact (for instance to test that link), then any activities you do in CiviCRM will be attached to that contact. So, if you create a group, it will say that other contact created the group or if you merge two contacts, it will say that other contact merged the contacts, etc.
  This is fixed by logging out and back in again (and of course could be avoided by testing the link in an incognito window). Note that this does not require you to submit the webform, merely to load the webform page with the tokenized link.
  
  I'm guessing this isn't something that is worth trying to track down, but thought I should put it here just in case.
  
  **Tags:** webform-civicrm, tokens
  
  > **Comments:**
  > **username_1**: I always use incognito to test a checksum as otherwise i would not be confident of my testing. i take you are saying 'i am logged in, i get a checksum link for another user and click that while logged in, then odd things happen'. if so i can only suggest to test checksums incognito or via another browser / 'people' (in the chrome sense)  
  > **username_0**: Absolutely, that's what I would normally do (test in incognito), I just thought it was worth noting here as it doesn't seem like expected behaviour (that activities would be assigned to a different contact than the one that actually was logged in to perform them).  
  > **username_1**: yep seems like something is clearly amiss - good reporting  
  
  ---
  
  ## 0 answers
  
  