Answers.Body: <p>Just for context - the security issue that caused CiviVolunteer to break was <a href="https://issues.civicrm.org/jira/browse/CRM-20243" rel="nofollow noreferrer">https://issues.civicrm.org/jira/browse/CRM-20243</a> - we upgraded to a secure version of Angular. Unfortunately our policy with security updates is not to give people advance notice - on the basis that it alerts the black hats more quickly than the white hats - so Gingko were not pre-warned there was a security release going out. </p>
  
  <p>The catch 22 of security releases is that they are the most essential and the most risky updates. Perhaps the risk of regressions when people don't know they are coming is greater than that of the black hats. Although people on the security channel didn't seem to test this either</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2017-07-28T07:14:48.703Z
Answers.Text: SA is https://civicrm.org/advisory/civi-sa-2017-08-upgrade-multiple-js-libraries
Answers.UserDisplayName: user4906
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2017-07-28T07:12:54.423Z
Answers.LastActivityDate: 2017-07-28T07:12:54.423Z
Answers.UserDisplayName: user4906
Answers.Body: <p>Ron. This is a <a href="https://issues.civicrm.org/jira/browse/VOL-310" rel="nofollow noreferrer">known issue</a>. CiviCRM made some changes to its Angular (a JavaScript library) integration that CiviVolunteer needs to catch up with.</p>
  
  <p>CiviVolunteer is maintained by an independent consultancy, Ginkgo Street Labs. We would like to resolve this problem as soon as possible, but we have a full slate of projects that, as a small business, we need to prioritize ahead of unfunded work. If your organization is able to contribute developer hours or funds toward resolution of this problem, please <a href="http://ginkgostreet.com/contact" rel="nofollow noreferrer">contact us</a>.</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2017-07-22T19:49:29.280Z
Answers.LastActivityDate: 2017-08-01T15:19:50.147Z
Answers.LastEditDate: 2017-08-01T15:19:50.147Z
Answers.UserDisplayName: universalhandle
Answers.Body: <p>Ron,</p>
  
  <p>They released another update 4.7.22. Here are details on the fixes in this version: <a href="https://github.com/civicrm/civicrm-core/blob/4.7.22/release-notes/4.7.22.md#bugs" rel="nofollow noreferrer">https://github.com/civicrm/civicrm-core/blob/4.7.22/release-notes/4.7.22.md#bugs</a></p>
  
  <p>I'm not sure if it will fix the CiviVolunteer issues, but maybe you want to give it a shot.</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2017-07-28T13:54:16.187Z
Answers.LastActivityDate: 2017-07-28T13:54:16.187Z
Answers.UserDisplayName: Bryan D.
Answers.Body: <p>A new version of CiviVolunteer has just been released that addresses this issue. Users running CiviCRM 4.7.21 and higher should upgrade. Details are here:</p>
  
  <p><a href="http://ginkgostreet.com/content/announcing-civivolunteer-222-release-0" rel="nofollow noreferrer">http://ginkgostreet.com/content/announcing-civivolunteer-222-release-0</a></p>
  
  <p>Users of CiviCRM 4.7.20 and prior <strong>SHOULD NOT UPGRADE</strong> CiviVolunteer past 4.6-2.2.1. The changes to CiviVolunteer that make it compatible with CiviCRM 4.7.21 and higher are incompatible with earlier releases.</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2017-09-22T13:04:57.647Z
Answers.LastActivityDate: 2017-09-22T13:04:57.647Z
Answers.UserDisplayName: Dan O'Brien
Body: <p>We started using the CiviVolunteer extension with success.  However, after we upgraded to the security release 4.7.21 some of the CiviVolunteer functions do not work.  Or they cannot be accessed from the navigation menu.</p>
  
  <p>We cannot access the following functions;
  - New Volunteer Project
  - Manage Volunteer Projects
  - Search for Volunteer Opportunities</p>
  
  <p>In addition, the CiviVolunteer menu items cannot be seen on the Navigation Menu editor (Administration > Custom Data and Screens > Navigation Menu)</p>
  
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2017-08-01T15:22:19.613Z
Comments.Text: In case you haven't seen it, [a beta release and patch](https://issues.civicrm.org/jira/browse/VOL-310?focusedCommentId=106209&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-106209) have been prepared. We're requesting that folks who have been affected by this problem provide feedback before the fix is released more widely.
Comments.UserDisplayName: universalhandle
Tags: <civivolunteer>
Title: CiviVolunteer - Functions Not Working after Security Update to Civi 4.7.21 on Drupal
ThreadText: # CiviVolunteer - Functions Not Working after Security Update to Civi 4.7.21 on Drupal
  
  (Asked by: username_0 on 2017-07-22)
  
  We started using the CiviVolunteer extension with success. However, after we upgraded to the security release 4.7.21 some of the CiviVolunteer functions do not work. Or they cannot be accessed from the navigation menu.
  
  We cannot access the following functions;
  - New Volunteer Project
  - Manage Volunteer Projects
  - Search for Volunteer Opportunities
  
  In addition, the CiviVolunteer menu items cannot be seen on the Navigation Menu editor (Administration > Custom Data and Screens > Navigation Menu)
  
  **Tags:** civivolunteer
  
  > **Comments:**
  > **username_1**: In case you haven't seen it, [a beta release and patch](https://issues.civicrm.org/jira/browse/VOL-310?focusedCommentId=106209&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-106209) have been prepared. We're requesting that folks who have been affected by this problem provide feedback before the fix is released more widely.  
  
  ---
  
  ## 4 answers
  
  ### Answer by username_2 on 2017-07-28. Score: 2
  
  Just for context - the security issue that caused CiviVolunteer to break was <https://issues.civicrm.org/jira/browse/CRM-20243> - we upgraded to a secure version of Angular. Unfortunately our policy with security updates is not to give people advance notice - on the basis that it alerts the black hats more quickly than the white hats - so Gingko were not pre-warned there was a security release going out.
  
  The catch 22 of security releases is that they are the most essential and the most risky updates. Perhaps the risk of regressions when people don't know they are coming is greater than that of the black hats. Although people on the security channel didn't seem to test this either
  
  > **Comments:**
  > **username_2**: SA is https://civicrm.org/advisory/civi-sa-2017-08-upgrade-multiple-js-libraries  
  
  ---
  
  ### Answer by username_1 on 2017-07-22. Score: 2
  
  Ron. This is a [known issue](https://issues.civicrm.org/jira/browse/VOL-310). CiviCRM made some changes to its Angular (a JavaScript library) integration that CiviVolunteer needs to catch up with.
  
  CiviVolunteer is maintained by an independent consultancy, Ginkgo Street Labs. We would like to resolve this problem as soon as possible, but we have a full slate of projects that, as a small business, we need to prioritize ahead of unfunded work. If your organization is able to contribute developer hours or funds toward resolution of this problem, please [contact us](http://ginkgostreet.com/contact).
  
  
  ---
  
  ### Answer by username_3 on 2017-07-28. Score: 1
  
  Ron,
  
  They released another update 4.7.22. Here are details on the fixes in this version: <https://github.com/civicrm/civicrm-core/blob/4.7.22/release-notes/4.7.22.md#bugs>
  
  I'm not sure if it will fix the CiviVolunteer issues, but maybe you want to give it a shot.
  
  
  ---
  
  ### Answer by username_4 on 2017-09-22. Score: 1
  
  A new version of CiviVolunteer has just been released that addresses this issue. Users running CiviCRM 4.7.21 and higher should upgrade. Details are here:
  
  <http://ginkgostreet.com/content/announcing-civivolunteer-222-release-0>
  
  Users of CiviCRM 4.7.20 and prior **SHOULD NOT UPGRADE** CiviVolunteer past 4.6-2.2.1. The changes to CiviVolunteer that make it compatible with CiviCRM 4.7.21 and higher are incompatible with earlier releases.
  
  
  ---
  
  