2

I have a use case where 'volunteers' deal with casework on an area basis, with a 'supervisor' for each area. Volunteers can add contacts, and view their own cases. Supervisors can view all cases.

Both roles' access to their area's contacts is limited by Civi's own ACL through each service user being assigned to an area group.

This works up to a point, in that neither group has permission to view cases outside their area, but supervisors' dashboards and dashlets show all cases, regardless of whether those contacts are visible.

Is this expected behaviour, or have I went wrong somewhere?

Drupal permission:

CiviCase: access all cases and activities View and edit all cases (for visible contacts)

Improve this question

1 Answer 1

Reset to default
1

You might be right. The dashboard as far as I can remember has never used ACL's it just uses "my" or "all". The feature where ACL support for case was introduced might have been for a different need and doesn't seem to have included the dashboard (https://issues.civicrm.org/jira/browse/CRM-17645).

So yes and no to your question?

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.