Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [acl]

Access Control Limits which may refer to CiviCRM inbuilt ACL options, or options provided by extensions that deliver Access Control

0
votes
3answers
17 views

Is is possible to restrict visibility of custom data sets?

Current install - WP5.0 / Civi 5.7.2 I'm just thinking through our Safeguarding / Child Protection process. We don't have any issues, but we're legally obliged to have a process. And I'd rather set ...
0
votes
2answers
38 views

CiviCRM view activities permissions

I have a role to view contacts in a particular group granted through CiviCRM view ACL permissions (/civicrm/acl?reset=1) but even though the role can see all contacts in that group, when trying to ...
-1
votes
0answers
26 views

ACL for Custom Fields

I have a group, named 'Local Admins'. I would like to add access to edit all Custom Fields for all the four the users in this group. These users have a Drupal role named 'Editors'. I revoked on the ...
1
vote
1answer
16 views

How to allow a user 'edit' on activities?

Users have ACL 'edit' access to a group, and can access the contacts in the group OK. They can create an activity, but then cannot edit it - for each activity they just get 'View' and 'File on Case' ...
0
votes
1answer
17 views

Different Contacts of same child Group in multisite

I use a multi-site CiviCRM installation with the CiviCRM Multisite extension installed and tuned : having Multi Site Configuration enabled and each site set with a Domain Group. I set all the proper ...
1
vote
0answers
17 views

ACL Permissions and new CMS

Recently we had a civicrm install under Drupal. We have changed the install to wordpress for several reasons. Under the Drupal version we had certain users who had a branch role. They could log in and ...
1
vote
1answer
19 views

Can't access contribution page without a login

I have recently updated CiviCRM in Joomla 3.x to the latest 5.5.2 build. I'm finding on my main contribution page (used for subscriptions), that I can't access it unless I'm logged in. When logged in, ...
3
votes
1answer
54 views

Is it possible to restrict view to certain case activities?

We are currently evaluating CiviCRM 5.4.1 and CiviCase on Wordpress 4.9.8 One of the requirements is to limit access to certain activity types. In simple words, some users are not allowed to view ...
1
vote
3answers
50 views

User can add themselves to any group

There are a couple of posts, listed below, already on this topic - but I'd like to follow up: SUMMARY I can create an ACL role and limit access to a custom field group - which is seemingly wonderful....
4
votes
0answers
24 views

ACL and Drupal roles

I'm having trouble to correctly setup ACL and Drupal roles (Civicrm 4.6.35 on Drupal 7) I have my contacts assigned to different groups (let's say G1 ... G5) For each group there is a corresponding ...
2
votes
1answer
36 views

Simple way to prevent one user seeing one contact

My user would like a particular case worker to be prevented from accessing one specific client. At present we're not using ACLs but I implemented one scheme that I could get to work on my test system ...
0
votes
0answers
5 views

How to publish CiviHR public vacancy list to website

I want to publish CiviHR Public Vacancy List on an external website. I tried to iframe the Public Vacancy List but its asking for login. For the below permission I have given access to Public but ...
0
votes
0answers
33 views

Unwanted links “do this for different person” on membership signup page

I maintain our organization Wordpress website and want to set up an online membership registration. On the development site Wordpress is at 4.8.6 and we recently upgraded to Civi 5.0.0, but I recall ...
1
vote
0answers
21 views

All CiviMail users can see every mailing in 'Include Mailing', even ones they shouldn't have access to

My expectation was that a user without Administrate CiviCRM permission would not be able to see another user's mailings in the Recipients: Include Mailing list. Instead a user with access over List A ...
0
votes
0answers
10 views

Can't produce “Activity” reports that are limited to “ACL” groups

We are a Christian discipleship program operating four different campuses in our state. We are on Drupal 7 and Civicrm 4.7.29. We have opted to segregate our campuses by using ACL's defined by ...
1
vote
1answer
31 views

Domain Access and CIVICRM ACL of data and drupal

I have CIVICRM Drupal 7 install with several sub-domains. It's working fine until I have tried to control access to contacts based on the subdomain/drupal users and their roles. I have tried ...
2
votes
0answers
31 views

CiviMail cannot create ACL recipient table after upgrading to CiviCRM 4.7.31

After upgrading to CiviCRM 4.7.31 I began to get several errors while initially trying to send a test e-mail using an ACL-based user. I noticed that these errors were not happening with the ...
3
votes
1answer
44 views

Using ACL for event registration

I have a use case where there are public and non public events. Public events should be seen by everyone and can be registered for. Non public events should only be seen and registerable for a certain ...
2
votes
1answer
87 views

Access Control issue in CiviCRM with Groups?

Hoping the CiviCRM expertise here within stackexchange can provide some guidance on a warning I'm seeing... When an Anonymous individual on our WordPress CiviCRM site has a Group (Mailing List) ...
1
vote
1answer
40 views

How to give fine grained access to communicating with selected contacts only?

We're a non-profit swimming club, just starting out with CiviCRM. We're offering ~20 courses per semester and already set up registration for those with CiviEvent. For an ideal setup i'd now need to ...
0
votes
0answers
33 views

Is there an ACL or Drupal role to edit multi-select options in a CiviCRM custom field but no other admin options?

We want to have a role in CiviCRM who cannot access admin pages but can manage some custom fields (e.g. add multi-select options in a custom list field). We haven't found the way to do it with ACLs in ...
3
votes
1answer
83 views

How do user permissions work for multi-level organizations?

We are currently using Action Network for our CRM (even though it is not designed for that), marketing and digital mobilising tools. We moved to them because of their system of parent/sibling/child ...
0
votes
1answer
19 views

How to automatically add contacts to a group that matches the ACL?

I've got ACLs set up. Certain users can only have access to contacts in a particular group. The problem is that when this user creates a contact they have to remember to add the contact to that group,...
1
vote
0answers
23 views

CiviBooking: self-service bookings?

Use case: we’d like anonymous (or, if necessary, authenticated) users to be able to create provisional bookings, but not to edit anyone else’s. In the Drupal access control, “create and update” is a ...
2
votes
1answer
42 views

My ACL Role is now showing selected contact groups

I tried digging through other questions before I posed my own. So, I'm asking for a solution here. What I want to do: I want to give a group of contacts ability to 1. Create and edit events based on ...
3
votes
1answer
40 views

Create programmatically a ACL logic

I have a need to create programmatically (from a csv) a complete ACL structure. In detail for each csv line i need to create the CMS user (Joomla) with a specific role the connected contact the ...
1
vote
4answers
143 views

Can someone help me understand smart group caching so I can prevent these deadlocks?

I know that the Civi devs have been struggling with this issue so I am not complaining or asking for it to be fixed - I just want to understand how it works, so that I can work aroud it. I am ...
1
vote
2answers
54 views

How to use advanced search to search contacts created by logged in user

Basically what I need to do is search for contacts created by the current logged in user. I have tried the change log tab but that does not work for me because then it would be contacts created by ...
2
votes
1answer
37 views

Assigning User Roles not processing

I created a user role and operations. I tried assigning a group (access based) to the user role in the assignment section. It does not stick. I'm not sure what I am doing wrong. The role is set up as ...
2
votes
1answer
29 views

Way to display non-public events to employees

Our organization has a variety of public events as well as private events. In many cases, I need volunteers/employees to see the private events so they can register to assist, etc. Is it possible ...
2
votes
2answers
43 views

ACL role assignments not showing on screen, but still working

When I go to civicrm/acl/entityrole it shows no role assignments and says "There are no Role Assignments. You can add one now." But they exist, have not been deleted and are still working. I can see ...
2
votes
1answer
46 views

Establishing Group Based Permissions to Limit Display of Content to Logged In User

I have a Drupal / Civi application running which uses ACL to restrict contact data to the Drupal user whom is a member of the Group (the Group Admin). Currently I have 5 Groups. However, each Group ...
1
vote
1answer
29 views

Multi-client capability und data storage

One important question: Is your software solution able to deal with multi-clients, e.g. that data can be separated between different clients (companies) und security can be setup for this requirement? ...
1
vote
1answer
67 views

What permission are required to select an existing event location in CiviEvent?

We are using CiviCRM 4.7.19 with Drupal 7.56. When creating or editing a CiviEvent our super users can use an existing location from a drop down: We also use another role in our organisation with ...
1
vote
1answer
70 views

Dashlets not available to be added to Dashboard

2 roles in Drupal, 2 groups in CiviCRM, 2 roles in CiviCRM administrators members of the board permissions in Drupal administrators: all permissions members of the board: all, except some (see list ...
2
votes
4answers
71 views

Capacity Planning

We would like to propose the utilization of CiviCRM in a big organization. They have 140.000 contacts, that manage more then 1.000.000 activities each year (including mails, contributions, etc), and ...
1
vote
1answer
47 views

Civievent - i cant add any event

I try to add an event in CiviEvent (with Superadmin role ), but I can not. After saving the first form, when Civi tries to go to https://staroflife.pl/civicrm/event/manage/location?action=update&...
0
votes
0answers
21 views

CiviEvent - how to manage events by area?

Good Morning! My organization has different areas, where each one manages their contacts, events, mails and can not share the information between them. For the handling of contacts I have achieved ...
1
vote
0answers
5 views

Inputted activities can not be displayed for one specific user but can be seen by others

A Civi user with Manager's rights asked this: The activities part of a volunteers file on Civi: although it may say 2 activities in the tabs, when I click on it, it says that there are no activities....
4
votes
2answers
42 views

CiviCRM: how to manage several areas for the same organization?

Good afternoon, we are analyzing CiviCRM as a possible solution for our organization. It is a governmental entity and in the same there is more than one area that is in a position to use CiviCRM to ...
3
votes
2answers
49 views

civicrm report access

I am trying to limit access to reports using acl/groups as mentioned in the userguide : https://docs.civicrm.org/user/en/4.7/reporting/set-up/#define-report-settings However, the field to set this ...
3
votes
0answers
49 views

Which permissions bypass/override ACLs?

I know that some permissions will cause ACL checks to be skipped on certain operations/entities, for example: view all contacts: skip ACLs for View operation on any Contact. edit all contacts: skip ...
0
votes
2answers
142 views

Group visibility

I've defined a number of groups under an "Administrator" account. I expect these groups to be visible for all users under the "Manage Groups" section but they currently can't see any previously ...
0
votes
2answers
124 views

ACL with nested groups

I need to config a 2 layers group structure GROUP 1 -- GROUP 1.1 -- GROUP 1.2 GROUP 2 -- GROUP 2.1 -- GROUP 2.2 Enabling a user to manage GROUP 1 contacts, this user will be able also to manage the ...
3
votes
1answer
56 views

How to control API4 permissions for CRUD operations?

How do I control permissions for API4 calls?
0
votes
1answer
194 views

How can I setup ACL for user to modify only custom fields?

I would like to limit access of some CiviCRM users, so they can only access contacts in certain smart groups. Meanwhile, I would like them to be able to edit Custom Fields. I created a separate ...
6
votes
1answer
203 views

Permissions, ACL and Groups

I would like to confirm this statements regarding permissions, ACL and groups (Wordpress 4.7.1, civicrm 4.7.15) Permission to edit contacts (ACL or general), allows user to assign contacts to ANY ...
1
vote
0answers
22 views

How is it possible to delete a contact with the edit permission for a group?

I have a user and want to give her limited access to contacts. She is supposed to view all contacts but create/edit/delete of only one specific group. I gave her Edit permission via ACLs fot that ...
1
vote
0answers
56 views

How to spoof users to unit test ACL logic

Starting to think about unit testing access control permission logic in API calls. Is there an established pattern for this? Within CiviUnitTestCase and ACLPermissionTest there are these snips: ...
1
vote
1answer
16 views

Hook permissions `type`

Looking at hook_civicrm_aclWhereClause I see there is a $type parameter but there is currently no documentation for this type. What are the allowed values?