Questions tagged [acl]

Access Control Limits which may refer to CiviCRM inbuilt ACL options, or options provided by extensions that deliver Access Control

Filter by
Sorted by
Tagged with
2
votes
1answer
49 views

My ACL Role is now showing selected contact groups

I tried digging through other questions before I posed my own. So, I'm asking for a solution here. What I want to do: I want to give a group of contacts ability to 1. Create and edit events based on ...
3
votes
1answer
17 views

Dashboard Summary on Memberships Page

I've just found out that the Membership Dashboard - specifically the summary table at the top of that page - is not visible if you don't have the permission 'CiviCRM: view all contacts'. Is there any ...
2
votes
2answers
27 views

How do I sync contacts who are not members in Wordpress?

My client organization only has organizational members, but provides services and events to individuals connected to the organization. The WP Member sync, seems limited to only syncing members. I ...
0
votes
0answers
8 views

Can I control access to specific price sets with ACL?

I have two primary member types. Full Members (FM) and Associate Members (AM). I need to keep all the pricing for both groups completely separate and since AM joins to have access to FM, they pay all ...
0
votes
2answers
60 views

CiviCRM view activities permissions

I have a role to view contacts in a particular group granted through CiviCRM view ACL permissions (/civicrm/acl?reset=1) but even though the role can see all contacts in that group, when trying to ...
6
votes
1answer
267 views

Permissions, ACL and Groups

I would like to confirm this statements regarding permissions, ACL and groups (Wordpress 4.7.1, civicrm 4.7.15) Permission to edit contacts (ACL or general), allows user to assign contacts to ANY ...
1
vote
0answers
40 views

CiviCRM permissions get wiped out after each upgrade (except for Public and Super Admin user groups)

Is anyone experiencing an issue where all CiviCRM permissions in Joomla get completely reset (meaning all permissions items are set to "Inherit") after every CiviCRM upgrade? Only the Public and Super ...
0
votes
0answers
21 views

Is there a method in ACL of allowing anonymous access to some events and not others?

I want some CiviCRM events to be Member-only and some to be public. But I'm not seeing a way of creating an ACL permission for the anonymous user and then assigning it to an event. The only way of ...
1
vote
0answers
19 views

CiviMail Sent/Scheduled Mailings does not list mailings for some users

I'm in a context using some CiviCRM ACLs to restrict access for regional staff to regional contacts. Some core staff have access across the regions. However, the regional staff cannot view the list ...
3
votes
1answer
39 views

Staff restricted by ACLs cannot use/see any other groups

I have a group of CiviCRM users who are restricted by ACL to only be allowed to view and edit contacts in a certain geographic region (those contacts in a group called "Northern Region"). They also ...
1
vote
0answers
12 views

How can I transfer ACL settings?

I want to transfer ACL settings from one site to an other. How can I export/import ACLs via SQL? Or is there any other way to do so?
2
votes
0answers
12 views

Find Respondents To Reserve - Groups

Looks to me like there's an issue that needs fixing, but I want to check to see if I've missed something. I'm testing functionality of walklists. The User-Contact is limited to a subset of contact ...
1
vote
1answer
37 views

Custom Data ACLs

I'm a little confused on how custom data ACLs work - specifically, when I give a role access to edit a set of custom data fields that are associated with a contact, like so: Does this allow that role ...
1
vote
1answer
29 views

Not inserting a ACL Role using ACL Role API

I was trying to assigning a new Users to CiviCRM ACL role through ACL Role API, but it is not showing me in database. Input json $result = civicrm_api3('AclRole', 'create', [ 'debug' => ...
1
vote
1answer
23 views

What is 'object_table' and 'object_id' in Acl API?

I am not understanding the meaning of 'object_role' and 'object_id' in ACL API. I was trying to manage ACL using CiviCRM API 3.
1
vote
2answers
70 views

DB Error: constraint violation on anonymous user contribution/membership registration after 5.8.2 -> 5.9.0 update

I upgraded two Joomla sites from 5.8.x to 5.9 and one of them now gives an error for anonymous contributions or membership registrations: Error: Database Error Code: Cannot add or update a child row:...
3
votes
3answers
156 views

ACL permissions Activities

I'm trying to make a permission, to limit view some activities types (A user with a specific role can't view a some activities types) I was checking the hook permissions but i don't find the way(...
2
votes
1answer
34 views

CiviCRM access for Wordpress custom group users

I am using CiviCRM 5.8.1 (update to 5.8.2 will be done shortly) on Wordpress 5.0.1 with German localization. For extended permission management on WP, I use Advanced Access Manager. I created a group ...
1
vote
3answers
37 views

Is is possible to restrict visibility of custom data sets?

Current install - WP5.0 / Civi 5.7.2 I'm just thinking through our Safeguarding / Child Protection process. We don't have any issues, but we're legally obliged to have a process. And I'd rather set ...
2
votes
1answer
35 views

Different Contacts of same child Group in multisite

I use a multi-site CiviCRM installation with the CiviCRM Multisite extension installed and tuned : having Multi Site Configuration enabled and each site set with a Domain Group. I set all the proper ...
1
vote
1answer
43 views

How to give fine grained access to communicating with selected contacts only?

We're a non-profit swimming club, just starting out with CiviCRM. We're offering ~20 courses per semester and already set up registration for those with CiviEvent. For an ideal setup i'd now need to ...
1
vote
1answer
30 views

How to allow a user 'edit' on activities?

Users have ACL 'edit' access to a group, and can access the contacts in the group OK. They can create an activity, but then cannot edit it - for each activity they just get 'View' and 'File on Case' ...
2
votes
0answers
28 views

ACL Permissions and new CMS

Recently we had a civicrm install under Drupal. We have changed the install to wordpress for several reasons. Under the Drupal version we had certain users who had a branch role. They could log in and ...
1
vote
1answer
34 views

Can't access contribution page without a login

I have recently updated CiviCRM in Joomla 3.x to the latest 5.5.2 build. I'm finding on my main contribution page (used for subscriptions), that I can't access it unless I'm logged in. When logged in, ...
3
votes
1answer
59 views

Is it possible to restrict view to certain case activities?

We are currently evaluating CiviCRM 5.4.1 and CiviCase on Wordpress 4.9.8 One of the requirements is to limit access to certain activity types. In simple words, some users are not allowed to view ...
1
vote
3answers
62 views

User can add themselves to any group

There are a couple of posts, listed below, already on this topic - but I'd like to follow up: SUMMARY I can create an ACL role and limit access to a custom field group - which is seemingly wonderful....
1
vote
4answers
188 views

Can someone help me understand smart group caching so I can prevent these deadlocks?

I know that the Civi devs have been struggling with this issue so I am not complaining or asking for it to be fixed - I just want to understand how it works, so that I can work aroud it. I am ...
5
votes
0answers
39 views

ACL and Drupal roles

I'm having trouble to correctly setup ACL and Drupal roles (Civicrm 4.6.35 on Drupal 7) I have my contacts assigned to different groups (let's say G1 ... G5) For each group there is a corresponding ...
12
votes
5answers
212 views

How do I prevent a user from adding contacts to ACL groups?

I have successfully set up CiviCRM ACLs so that only contacts within the group "NYC Team" have access to certain events. What I am trying to figure out is how to prevent low-level users from adding ...
2
votes
1answer
36 views

Simple way to prevent one user seeing one contact

My user would like a particular case worker to be prevented from accessing one specific client. At present we're not using ACLs but I implemented one scheme that I could get to work on my test system ...
6
votes
2answers
67 views

Which Drupal permissions does a user need in order to see and change their relatives (contacts with permissioned relationships) in webform?

I have a webform which users use to register themselves and their family members for events. If users have a login, it automatically populates their family members, who are contacts with permissioned ...
4
votes
1answer
222 views

Creating ACL for Smart Groups

Is it possible to create an ACL associated with a Smart Group? I'm attempting to create a members directory that is only accessible to members. I can't seem to get it working. Here's what I've done ...
1
vote
0answers
31 views

All CiviMail users can see every mailing in 'Include Mailing', even ones they shouldn't have access to

My expectation was that a user without Administrate CiviCRM permission would not be able to see another user's mailings in the Recipients: Include Mailing list. Instead a user with access over List A ...
1
vote
1answer
44 views

Domain Access and CIVICRM ACL of data and drupal

I have CIVICRM Drupal 7 install with several sub-domains. It's working fine until I have tried to control access to contacts based on the subdomain/drupal users and their roles. I have tried ...
2
votes
0answers
38 views

CiviMail cannot create ACL recipient table after upgrading to CiviCRM 4.7.31

After upgrading to CiviCRM 4.7.31 I began to get several errors while initially trying to send a test e-mail using an ACL-based user. I noticed that these errors were not happening with the ...
3
votes
1answer
35 views

Can I set permissions to see one type of contribution, but not another?

We have a number of staff who should have access to see event payment information, but who should not see donation information. Is there a way to set permissions via ACL or otherwise based on ...
2
votes
1answer
105 views

Access Control issue in CiviCRM with Groups?

Hoping the CiviCRM expertise here within stackexchange can provide some guidance on a warning I'm seeing... When an Anonymous individual on our WordPress CiviCRM site has a Group (Mailing List) ...
3
votes
1answer
55 views

Using ACL for event registration

I have a use case where there are public and non public events. Public events should be seen by everyone and can be registered for. Non public events should only be seen and registerable for a certain ...
1
vote
1answer
73 views

What permission are required to select an existing event location in CiviEvent?

We are using CiviCRM 4.7.19 with Drupal 7.56. When creating or editing a CiviEvent our super users can use an existing location from a drop down: We also use another role in our organisation with ...
0
votes
1answer
28 views

How to automatically add contacts to a group that matches the ACL?

I've got ACLs set up. Certain users can only have access to contacts in a particular group. The problem is that when this user creates a contact they have to remember to add the contact to that group,...
3
votes
1answer
99 views

How do user permissions work for multi-level organizations?

We are currently using Action Network for our CRM (even though it is not designed for that), marketing and digital mobilising tools. We moved to them because of their system of parent/sibling/child ...
2
votes
0answers
46 views

CiviBooking: self-service bookings?

Use case: we’d like anonymous (or, if necessary, authenticated) users to be able to create provisional bookings, but not to edit anyone else’s. In the Drupal access control, “create and update” is a ...
2
votes
1answer
47 views

Create programmatically a ACL logic

I have a need to create programmatically (from a csv) a complete ACL structure. In detail for each csv line i need to create the CMS user (Joomla) with a specific role the connected contact the ...
1
vote
2answers
68 views

How to use advanced search to search contacts created by logged in user

Basically what I need to do is search for contacts created by the current logged in user. I have tried the change log tab but that does not work for me because then it would be contacts created by ...
2
votes
1answer
39 views

Assigning User Roles not processing

I created a user role and operations. I tried assigning a group (access based) to the user role in the assignment section. It does not stick. I'm not sure what I am doing wrong. The role is set up as ...
2
votes
1answer
56 views

Establishing Group Based Permissions to Limit Display of Content to Logged In User

I have a Drupal / Civi application running which uses ACL to restrict contact data to the Drupal user whom is a member of the Group (the Group Admin). Currently I have 5 Groups. However, each Group ...
2
votes
1answer
32 views

Way to display non-public events to employees

Our organization has a variety of public events as well as private events. In many cases, I need volunteers/employees to see the private events so they can register to assist, etc. Is it possible ...
2
votes
2answers
44 views

ACL role assignments not showing on screen, but still working

When I go to civicrm/acl/entityrole it shows no role assignments and says "There are no Role Assignments. You can add one now." But they exist, have not been deleted and are still working. I can see ...
1
vote
1answer
33 views

Multi-client capability und data storage

One important question: Is your software solution able to deal with multi-clients, e.g. that data can be separated between different clients (companies) und security can be setup for this requirement? ...
5
votes
1answer
269 views

How to grant permissions (ACL) when working with nested groups?

I pushed a topic here that has not yet been solved in the forum and that affects our organizations: http://forum.civicrm.org/index.php?topic=29381 Managing ACLs is really heavy and is very ...