If I create a profile for search/listings, and provide access to that profile to some class of users, the profile results will include all contacts matching the search criteria, even though the current user doesn't have view or edit access to many of those contacts.
- Create a simple search/listings profile with only the ContactID field.
- Make this profile available to a contact group including user Mary (via ACLs and/or CMS permissions)
- Log in as Mary.
- As Mary, access CiviCRM back-office area, use the standard Find Contacts search with no criteria to display all visible contacts; observe X results, where X is the number of contacts whom Mary can view considering ACLs, permissioned relationships, etc.
- As Mary, access the search/listings profile from step 1, and submit with no criteria to display all possible results; observe Y results, where Y is the total number of contacts in the system. I.e., Mary can see everyone in the CRM through this profile.
How can I configure this profile so that it only returns the X contacts that Mary actually has permission to view?