We want to add a secondary case role that is similar to Case Manager with slightly less permissions (eg cannot change/add case roles, can't delete case etc). We have a relationship that can be added as a case role in the case settings. People that have this new case role also have a drupal role. Their permissions are currently "access my cases and activities" , "view all activities. However when they look at a case they are the new Case Role for they can see all the activities listed for the case, but don't have the option to go and 'view' the activity's details (unless they are a contact listed on the activity). We want them to be able to view the activity details for the case.

When we find the relevant url that would give a Case Manager access to the activity, and test that url as this other user then we get "do not have permission to access this page" - eg url of type /civicrm/case/activity/view?cid=XXXX&aid=YYY


  • Sounds like it might be a bug/oversight. I can't think of a reason it wouldn't behave as expected. I assume you mean if you click on the activity subject it gives access denied.
    – Demerit
    Commented Feb 19, 2018 at 23:11
  • will test and confirm
    – petednz - fuzion
    Commented Feb 20, 2018 at 0:55
  • if we find the relevant url that would be what a Case Manager would use, and then test that url as this other user then we get "do not have permission to access this page - eg url of type /civicrm/case/activity/view?cid=XXXX&aid=YYY
    – petednz - fuzion
    Commented Mar 6, 2018 at 5:14

1 Answer 1


I'd say this is coming from CRM_Case_BAO_Case::checkPermission(), around line 2659 where it says

//user has only access to my cases and activity. [sic]
//here object specific permmions come in picture.

It seems like this is part of the definition of "my cases and activities", where you have to be either the reporter, with contact/target, or assignee of the activity to be able to view it.

So to get the arrangement you're looking for you either have to give them access to all cases and activities, or something more complicated involving code is needed.

  • Yes that sounds right and yes I expect we will need to do this via an Extension
    – petednz - fuzion
    Commented Mar 6, 2018 at 20:03

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.