Questions tagged [acl]

Access Control Limits which may refer to CiviCRM inbuilt ACL options, or options provided by extensions that deliver Access Control

Filter by
Sorted by
Tagged with
0 votes
0 answers
11 views

We are testing/evaluating CiviCRM Spark, but I can't get APIv4 to work

I'm not asking for tech support (sort of), I just need to know if the functionality is there. Checking the "Extensions" I see that API KEY MANAGEMENT is not Enabled. I'm not sure if we are ...
1 vote
1 answer
19 views

Need Membership Chair to access CiviCRM Memberships, Treasurer to access Contributions. On Drupal

In Drupal we have various roles set up for the Membership Chairperson, the Treasurer, and other committees. We are trying to give access to these same functions through CiviCRM, not Drupal. Our Drupal ...
0 votes
0 answers
13 views

ACL Nested Parent / Child Groups don't work

I have two groups of separated users and defined the proper ACLs so they can only see the contacts in their (parent)group. Now I need to give them the ability to create (child)groups based on their ...
1 vote
0 answers
21 views

How do hide Groups from a user role unless they're permitted via ACL

I see that ACLs allow one to permit a user role to view selected Groups, however, something is enabled somewhere allowing all users to view all the Groups. I don't have the permission setup allowing ...
1 vote
1 answer
41 views

How to restrict access to certain information for non-admin users (i.e. volunteers)

I'm working on a CiviCRM system which has volunteers who we need to restrict access to specific contact information. I've created a group for the Volunteers as well as a group (called Private Contacts)...
1 vote
1 answer
23 views

Why do my site permissions mean a volunteer user role can see activities in the Activity tab, but then not see them when moved to case?

Civi 5.42 D7 I have set up a case system for our organisation to allow "Volunteer Counsellors" to access civi, see the clients they are allocated to and manage their clients' cases. The &...
  • 1,944
2 votes
0 answers
160 views

Restricting contacts in groups using ACL roles

We want to create a role for a certain set of users in WP/Civi - to have access to only a certain group of contacts. Here's what we have done. Added the Members plugin to create new roles Assigned ...
  • 73
1 vote
0 answers
19 views

Activity Access Control - Restrict to contact group

Using Civi 5.38 on a WordPress site We use 3 levels of user role which I manage through the WordPress Access Control screen. I want to retrict some of the acitivities within the roles and am using the ...
  • 53
1 vote
0 answers
25 views

Contact Groups and ACL Management

I am using Civi 5.38 on a WordPress site, and have a query on ACL permissions. We want to use different tiers of access for the information stored in custom data sets. We have created ACLs and applied ...
  • 53
2 votes
2 answers
54 views

ACL to limit access to contacts by Membership

It seems using ACLs to limit access to contacts is a hot topic. I've reviewed many of the questions on the topic, many years old, but have yet to find a solution. Scenario is: • Our Federation has ...
1 vote
0 answers
24 views

Groups not visible despite correct ACL after going from 5.18 to 5.35

Users with visibility to a group of contacts no longer see that group as selectable in search. At first I suspected that migration failed in some way, but after creating a whole new group, group ...
  • 111
1 vote
0 answers
36 views

HOWTO organize hierarchical groups and ACLs in WordPress

We are currently using CiviCRM ver. 5.35.1 on WordPress ver. 5.7.1. All our contacts and organizations are included in groups related to (Italian) Regions, with Provinces within (the same organization ...
5 votes
1 answer
55 views

Is it possible to have a user that's only capability is to work with Mosaico. Specifically to Create/modify templates

I'm a one man show and this is my first excursion into setting ACLs. I have a volunteer that wants to work with me on creating & editing Mosaico email templates. At some point they may also be ...
0 votes
2 answers
50 views

How to automatically create relationship between Drupal role user and a group of civi contacts?

I have webform where volunteers signup for newsletter. They land on group called "Volunteer". Our volunteer co-ordinator users are in a drupal role called "Coordinator" What I want ...
  • 2,856
2 votes
0 answers
40 views

Smart Groups and ACL

I have read the comments relating to this matter. Still I just wonder if it is possible to assign ACL ownership to a Smart Group. No option for Access Control on the Group page is available. Is this ...
1 vote
1 answer
30 views

Is it possible, using ACLs, for a group to have only 'create' access to contact custom data and another group to have 'edit'?

My user would like one group of users to be able to have only 'create' only access to a custom field set that will be in a contact's tab, and for another group to be able to have 'edit' access. I ...
  • 4,379
0 votes
2 answers
21 views

Allow region reps to have RO to global mship info - but only to their own regional records. Db field or tag for "region"?

As the title says, I need to appoint reps for each region who can access their "own" regions records to send mailings. We are using Wordpress and everything is the latest versions. Is "...
1 vote
0 answers
24 views

Profile listing shows all contacts regardless of permissions -- how to limit results to permissioned contacts only?

If I create a profile for search/listings, and provide access to that profile to some class of users, the profile results will include all contacts matching the search criteria, even though the ...
  • 1,672
0 votes
1 answer
53 views

How can I prevent users editing custom fields for contacts not in their ACL group?

Using Wordpress 5.4.1 with Civi 5.24.3. We have a smart group used for ACL which prevents the core "Edit" button being shown on the contact summary. There is also an ACL entry for a group of ...
  • 696
1 vote
1 answer
39 views

How to allow users in ACL group to add & remove contacts in groups

I'm implementing ACLs for a client. Users can only have view or edit to a group when adding permissions, so then don't have the ability to add or remove a contact from that group. In fact, I've found ...
  • 4,379
1 vote
2 answers
57 views

Is smart group cache set to 0 OK for this situation?

Using ACLs I have setup a group of users to have edit access to a smart group of contacts. The smart group is based upon the contact type. The problem is when one of these users creates a contact of ...
  • 4,379
0 votes
0 answers
11 views

Manage members of the OG_Sync Access Control Group

We are using Drupal Organic Groups, and the OG_Sync function that ships with CiviCRM Core to create corresponding CiviCRM Groups. We are converting from an existing system where all editing is ...
3 votes
4 answers
108 views

Assign all contacts created by a user to one group automatically?

Just what it says in the title. I have an issue with ACL where the user that has access to only one group creates a New Individual (through civicrm) winch then they do not have the access to. My ...
  • 867
1 vote
1 answer
53 views

Permissions help with using action.forward token in an email

I want to add a forward to a friend at the bottom of an email. When recipient clicks they see the "enter up to 5 email address" page however if they are a non-authenticated user they get a Undefined ...
0 votes
2 answers
47 views

Feature request: Relate memberships to Groups and have separate access

Overview I have a number of groups. Each group has one or more memberships. With ACL I can discern between the access to the different groups and their contacts. However, when access is granted, the ...
3 votes
4 answers
90 views

Private content for event participant?

My scenario is quite simple to explain : When a person register on an event (paid or free), we would like to give him an direct access to private content (by email or by direct redirect) (like ...
  • 138
4 votes
1 answer
318 views

SOLVED!! DB Error: no such table ERROR searching erroneous ACL table

I have read other related questions but I do not see a match with my mistake. Civicrm version 4.7.31 Drupal 7.67 MySQL 5.6.42 PHP7.1 After migrating from civicrm 4.5.8 and php5.6 everything works fine ...
  • 41
4 votes
1 answer
36 views

Dashboard Summary on Memberships Page

I've just found out that the Membership Dashboard - specifically the summary table at the top of that page - is not visible if you don't have the permission 'CiviCRM: view all contacts'. Is there any ...
2 votes
2 answers
57 views

How do I sync contacts who are not members in Wordpress?

My client organization only has organizational members, but provides services and events to individuals connected to the organization. The WP Member sync, seems limited to only syncing members. I ...
0 votes
0 answers
13 views

Can I control access to specific price sets with ACL?

I have two primary member types. Full Members (FM) and Associate Members (AM). I need to keep all the pricing for both groups completely separate and since AM joins to have access to FM, they pay all ...
1 vote
2 answers
50 views

Is there a method in ACL of allowing anonymous access to some events and not others?

I want some CiviCRM events to be Member-only and some to be public. But I'm not seeing a way of creating an ACL permission for the anonymous user and then assigning it to an event. The only way of ...
3 votes
1 answer
87 views

Staff restricted by ACLs cannot use/see any other groups

I have a group of CiviCRM users who are restricted by ACL to only be allowed to view and edit contacts in a certain geographic region (those contacts in a group called "Northern Region"). They also ...
  • 3,688
1 vote
0 answers
20 views

CiviMail Sent/Scheduled Mailings does not list mailings for some users

I'm in a context using some CiviCRM ACLs to restrict access for regional staff to regional contacts. Some core staff have access across the regions. However, the regional staff cannot view the list ...
  • 3,688
1 vote
0 answers
50 views

CiviCRM permissions get wiped out after each upgrade (except for Public and Super Admin user groups)

Is anyone experiencing an issue where all CiviCRM permissions in Joomla get completely reset (meaning all permissions items are set to "Inherit") after every CiviCRM upgrade? Only the Public and Super ...
  • 754
1 vote
0 answers
17 views

How can I transfer ACL settings?

I want to transfer ACL settings from one site to an other. How can I export/import ACLs via SQL? Or is there any other way to do so?
  • 387
2 votes
0 answers
16 views

Find Respondents To Reserve - Groups

Looks to me like there's an issue that needs fixing, but I want to check to see if I've missed something. I'm testing functionality of walklists. The User-Contact is limited to a subset of contact ...
1 vote
1 answer
66 views

Custom Data ACLs

I'm a little confused on how custom data ACLs work - specifically, when I give a role access to edit a set of custom data fields that are associated with a contact, like so: Does this allow that role ...
  • 226
1 vote
1 answer
28 views

What is 'object_table' and 'object_id' in Acl API?

I am not understanding the meaning of 'object_role' and 'object_id' in ACL API. I was trying to manage ACL using CiviCRM API 3.
  • 197
1 vote
2 answers
93 views

DB Error: constraint violation on anonymous user contribution/membership registration after 5.8.2 -> 5.9.0 update

I upgraded two Joomla sites from 5.8.x to 5.9 and one of them now gives an error for anonymous contributions or membership registrations: Error: Database Error Code: Cannot add or update a child row:...
  • 530
1 vote
1 answer
40 views

Not inserting a ACL Role using ACL Role API

I was trying to assigning a new Users to CiviCRM ACL role through ACL Role API, but it is not showing me in database. Input json $result = civicrm_api3('AclRole', 'create', [ 'debug' => ...
  • 197
2 votes
1 answer
52 views

CiviCRM access for Wordpress custom group users

I am using CiviCRM 5.8.1 (update to 5.8.2 will be done shortly) on Wordpress 5.0.1 with German localization. For extended permission management on WP, I use Advanced Access Manager. I created a group ...
1 vote
3 answers
95 views

Is is possible to restrict visibility of custom data sets?

Current install - WP5.0 / Civi 5.7.2 I'm just thinking through our Safeguarding / Child Protection process. We don't have any issues, but we're legally obliged to have a process. And I'd rather set ...
1 vote
2 answers
202 views

CiviCRM view activities permissions

I have a role to view contacts in a particular group granted through CiviCRM view ACL permissions (/civicrm/acl?reset=1) but even though the role can see all contacts in that group, when trying to ...
  • 1,106
1 vote
1 answer
90 views

How to allow a user 'edit' on activities?

Users have ACL 'edit' access to a group, and can access the contacts in the group OK. They can create an activity, but then cannot edit it - for each activity they just get 'View' and 'File on Case' ...
  • 4,379
2 votes
1 answer
40 views

Different Contacts of same child Group in multisite

I use a multi-site CiviCRM installation with the CiviCRM Multisite extension installed and tuned : having Multi Site Configuration enabled and each site set with a Domain Group. I set all the proper ...
  • 553
2 votes
0 answers
42 views

ACL Permissions and new CMS

Recently we had a civicrm install under Drupal. We have changed the install to wordpress for several reasons. Under the Drupal version we had certain users who had a branch role. They could log in and ...
1 vote
1 answer
99 views

Can't access contribution page without a login

I have recently updated CiviCRM in Joomla 3.x to the latest 5.5.2 build. I'm finding on my main contribution page (used for subscriptions), that I can't access it unless I'm logged in. When logged in, ...
3 votes
1 answer
90 views

Is it possible to restrict view to certain case activities?

We are currently evaluating CiviCRM 5.4.1 and CiviCase on Wordpress 4.9.8 One of the requirements is to limit access to certain activity types. In simple words, some users are not allowed to view ...
1 vote
3 answers
138 views

User can add themselves to any group

There are a couple of posts, listed below, already on this topic - but I'd like to follow up: SUMMARY I can create an ACL role and limit access to a custom field group - which is seemingly wonderful....
  • 2,426
5 votes
0 answers
61 views

ACL and Drupal roles

I'm having trouble to correctly setup ACL and Drupal roles (Civicrm 4.6.35 on Drupal 7) I have my contacts assigned to different groups (let's say G1 ... G5) For each group there is a corresponding ...