1

We want to add a secondary case role that is similar to Case Manager with slightly less permissions (eg cannot change/add case roles, can't delete case etc). We have a relationship that can be added as a case role in the case settings. People that have this new case role also have a drupal role. Their permissions are currently "access my cases and activities" , "view all activities. However when they look at a case they are the new Case Role for they can see all the activities listed for the case, but don't have the option to go and 'view' the activity's details (unless they are a contact listed on the activity). We want them to be able to view the activity details for the case.

When we find the relevant url that would give a Case Manager access to the activity, and test that url as this other user then we get "do not have permission to access this page" - eg url of type /civicrm/case/activity/view?cid=XXXX&aid=YYY

Thoughts?

  • Sounds like it might be a bug/oversight. I can't think of a reason it wouldn't behave as expected. I assume you mean if you click on the activity subject it gives access denied. – Demerit Feb 19 '18 at 23:11
  • will test and confirm – petednz - fuzion Feb 20 '18 at 0:55
  • if we find the relevant url that would be what a Case Manager would use, and then test that url as this other user then we get "do not have permission to access this page - eg url of type /civicrm/case/activity/view?cid=XXXX&aid=YYY – petednz - fuzion Mar 6 '18 at 5:14
1

I'd say this is coming from CRM_Case_BAO_Case::checkPermission(), around line 2659 where it says

//user has only access to my cases and activity. [sic]
//here object specific permmions come in picture.

It seems like this is part of the definition of "my cases and activities", where you have to be either the reporter, with contact/target, or assignee of the activity to be able to view it.

So to get the arrangement you're looking for you either have to give them access to all cases and activities, or something more complicated involving code is needed.

  • Yes that sounds right and yes I expect we will need to do this via an Extension – petednz - fuzion Mar 6 '18 at 20:03

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.