Now that we have the basics of civicrm set up for our cathedral, we are looking at migrating giving recording - i.e. contributions and pledges.
The primary requirement is that contribution is anonymous. No one (with the exception of one giving recorder) knows how much anyone has contributed. The current system uses a donor number for each person, so whoever is doing data entry should be able to record contributions by entering this number only, and not see the person's name.
Contributions are via cash (in numbered envelopes)[/edit], EFTPOS and automatic payment.
Desired output: At the end of each financial year, the giving recorder can generate a single tax receipt which accumulates a person's donations throughout the year - and send it to them so that they can claim a tax credit.
That's a long way from the standard usage of civicontribute and civipledge, but I hope that someone out there has had to build something similar and can light the way.
As a supplementary question: it has been suggested that we store the donor numbers in the external ID field. How can we restrict access (view and edit) to this built-in field to a single role?[/edit]