I want to set up some profiles that are visible and editable only to Drupal users with a given role. However it looks like regardless of the permission settings I use, all users can see the profiles in their user account. Is this expected behaviour?

  • Can you explain how you think you have fine grained control over permissions to see a Profile? – petednz - fuzion Sep 22 '15 at 20:03
  • The approach I've taken is to turn off all the profile-related permissions and custom field access permissions in Drupal's permissioning, and then set up Civi ACL's to enable relevant groups of users to view and access given profiles and custom fields. It sort of works, but what I'm seeing is, that regardless of the user's role, when they edit their user account they can see the tabs with the names of the profiles. If they click on one of the tabs they get an error message. I guess I could hide the tabs with CSS, but I shouldn't need to do that. Am I doing it wrong? – Graham Sep 23 '15 at 8:33

If this is problematic it could be easier to provide these as Webforms which have fine grained access settings

| improve this answer | |
  • 1
    Note that unless you use some other level of acl in drupal the webform 'node' itself will be visible to anon, just the 'form' part which can be hidden via the webform settings – petednz - fuzion Sep 23 '15 at 19:37
  • Yep. I'm using Nodeaccess in this case I think to control which roles get to see which nodes. – Graham Sep 23 '15 at 19:55

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.