I'm working on a CiviCRM system which has volunteers who we need to restrict access to specific contact information.
I've created a group for the Volunteers as well as a group (called Private Contacts) for those people whose contact information needs to be hidden. I also created an ACL for Volunteers and a Group for Volunteers and placed the Volunteers into the Group. I also setup an ACL allowing them to view Contacts in All Groups.
The result is the Volunteers are getting full access to all the contact information for the users in the Private Contact group.
So far, all I can see are ways to enable access to things (like enabling access to View the groups) but I can't see how to restrict access to anything.
Is there a setting that I am missing?
For example, if I want to hide the mailing address or cell phones for the volunteer users. Or, better yet, if the volunteer users were not able to view the list of contacts that are part of the Private Group.