We manage a site for a charity working with victims of domestic violence.
They work in 5 separate locations , and the organisation's preference is for staff working in a given area only to be able to access contact records (for staff and clients) in that area.
(In the past they have had to deal with relatives of offenders who have become staff members in different locations in order to access victim's details from their system).
Initially they worked across 3 locations and ACL's worked fine. As there work expanded and more projects came on line, the number of ACL roles and number of extra groups to give access to has expanded. Additionally some staff work across more than one project/ ACL role.
Intermittently the ACL rules fail, and staff members can see fewer contacts within a group than are in it. ie. Location Contact group has 729 members, when Staff Member A views that group from a find contacts search she see's 149 contacts.
(I've checked this using the Drupal Masquerade module).
It seems to me that multiple ACL roles are conflicting with one another, and restricting the number of contacts the staff member can view.
I've fixed this in the past, by deleting ACLs and rebuilding from scratch. Eventually this falls over and we need to do that again.
Has anyone experienced anything like this?
Any ideas what may be causing this intermittent problem?
Drupal 7.39 Civi 4.4.21