Questions tagged [acl]

Access Control Limits which may refer to CiviCRM inbuilt ACL options, or options provided by extensions that deliver Access Control

38 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
6
votes
1answer
488 views

Permissions, ACL and Groups

I would like to confirm this statements regarding permissions, ACL and groups (Wordpress 4.7.1, civicrm 4.7.15) Permission to edit contacts (ACL or general), allows user to assign contacts to ANY ...
5
votes
0answers
47 views

ACL and Drupal roles

I'm having trouble to correctly setup ACL and Drupal roles (Civicrm 4.6.35 on Drupal 7) I have my contacts assigned to different groups (let's say G1 ... G5) For each group there is a corresponding ...
3
votes
1answer
235 views

SOLVED!! DB Error: no such table ERROR searching erroneous ACL table

I have read other related questions but I do not see a match with my mistake. Civicrm version 4.7.31 Drupal 7.67 MySQL 5.6.42 PHP7.1 After migrating from civicrm 4.5.8 and php5.6 everything works fine ...
2
votes
0answers
29 views

Smart Groups and ACL

I have read the comments relating to this matter. Still I just wonder if it is possible to assign ACL ownership to a Smart Group. No option for Access Control on the Group page is available. Is this ...
2
votes
0answers
16 views

Find Respondents To Reserve - Groups

Looks to me like there's an issue that needs fixing, but I want to check to see if I've missed something. I'm testing functionality of walklists. The User-Contact is limited to a subset of contact ...
2
votes
0answers
36 views

ACL Permissions and new CMS

Recently we had a civicrm install under Drupal. We have changed the install to wordpress for several reasons. Under the Drupal version we had certain users who had a branch role. They could log in and ...
2
votes
0answers
48 views

CiviMail cannot create ACL recipient table after upgrading to CiviCRM 4.7.31

After upgrading to CiviCRM 4.7.31 I began to get several errors while initially trying to send a test e-mail using an ACL-based user. I noticed that these errors were not happening with the ...
2
votes
0answers
60 views

CiviBooking: self-service bookings?

Use case: we’d like anonymous (or, if necessary, authenticated) users to be able to create provisional bookings, but not to edit anyone else’s. In the Drupal access control, “create and update” is a ...
2
votes
1answer
75 views

My ACL Role is now showing selected contact groups

I tried digging through other questions before I posed my own. So, I'm asking for a solution here. What I want to do: I want to give a group of contacts ability to 1. Create and edit events based on ...
2
votes
0answers
59 views

Which permissions bypass/override ACLs?

I know that some permissions will cause ACL checks to be skipped on certain operations/entities, for example: view all contacts: skip ACLs for View operation on any Contact. edit all contacts: skip ...
2
votes
0answers
95 views

ACL view & edit two contact groups

I'm running CiviCRM 4.6.9 (yes I'm late!) with Drupal 7. I have two groups of contacts (regular, not smart groups) A and B. I need to allow a group of user to view and edit contacts in these 2 ...
2
votes
0answers
30 views

Subscriber User on WordPress Demo Site

I've been running into a few issues on my CiviCRM installs that would be nice to test against the demo site. However, because there is no subscriber level user on the demo, and I can't seem to create ...
2
votes
0answers
128 views

Unable to change back end acl permissions to civicrm?

I am trying to add CiviCRM to a joomla cms group named CRM Admin. When I try to modify the acl for this group in the cms global configurations, it will not save the changes. I can assign permissions ...
1
vote
0answers
22 views

Groups not visible despite correct ACL after going from 5.18 to 5.35

Users with visibility to a group of contacts no longer see that group as selectable in search. At first I suspected that migration failed in some way, but after creating a whole new group, group ...
1
vote
0answers
22 views

HOWTO organize hierarchical groups and ACLs in WordPress

We are currently using CiviCRM ver. 5.35.1 on WordPress ver. 5.7.1. All our contacts and organizations are included in groups related to (Italian) Regions, with Provinces within (the same organization ...
1
vote
1answer
20 views

Is it possible, using ACLs, for a group to have only 'create' access to contact custom data and another group to have 'edit'?

My user would like one group of users to be able to have only 'create' only access to a custom field set that will be in a contact's tab, and for another group to be able to have 'edit' access. I ...
1
vote
0answers
14 views

Profile listing shows all contacts regardless of permissions — how to limit results to permissioned contacts only?

If I create a profile for search/listings, and provide access to that profile to some class of users, the profile results will include all contacts matching the search criteria, even though the ...
1
vote
1answer
33 views

Permissions help with using action.forward token in an email

I want to add a forward to a friend at the bottom of an email. When recipient clicks they see the "enter up to 5 email address" page however if they are a non-authenticated user they get a Undefined ...
1
vote
0answers
20 views

CiviMail Sent/Scheduled Mailings does not list mailings for some users

I'm in a context using some CiviCRM ACLs to restrict access for regional staff to regional contacts. Some core staff have access across the regions. However, the regional staff cannot view the list ...
1
vote
0answers
48 views

CiviCRM permissions get wiped out after each upgrade (except for Public and Super Admin user groups)

Is anyone experiencing an issue where all CiviCRM permissions in Joomla get completely reset (meaning all permissions items are set to "Inherit") after every CiviCRM upgrade? Only the Public and Super ...
1
vote
0answers
16 views

How can I transfer ACL settings?

I want to transfer ACL settings from one site to an other. How can I export/import ACLs via SQL? Or is there any other way to do so?
1
vote
2answers
152 views

CiviCRM view activities permissions

I have a role to view contacts in a particular group granted through CiviCRM view ACL permissions (/civicrm/acl?reset=1) but even though the role can see all contacts in that group, when trying to ...
1
vote
0answers
37 views

All CiviMail users can see every mailing in 'Include Mailing', even ones they shouldn't have access to

My expectation was that a user without Administrate CiviCRM permission would not be able to see another user's mailings in the Recipients: Include Mailing list. Instead a user with access over List A ...
1
vote
0answers
7 views

Inputted activities can not be displayed for one specific user but can be seen by others

A Civi user with Manager's rights asked this: The activities part of a volunteers file on Civi: although it may say 2 activities in the tabs, when I click on it, it says that there are no activities....
1
vote
0answers
24 views

How is it possible to delete a contact with the edit permission for a group?

I have a user and want to give her limited access to contacts. She is supposed to view all contacts but create/edit/delete of only one specific group. I gave her Edit permission via ACLs fot that ...
1
vote
0answers
73 views

How to spoof users to unit test ACL logic

Starting to think about unit testing access control permission logic in API calls. Is there an established pattern for this? Within CiviUnitTestCase and ACLPermissionTest there are these snips: ...
1
vote
0answers
20 views

Group criteria updates through advanced search when no rights granted. Is this a bug?

Environment: Drupal 7.53 CiviCRM 4.6.24 LTS For MailUsers in Drupal Permissions, I have it set to: CiviCRM: edit groups (No Rights for MailUsers)(only Admin has this) CiviCRM: administer reserved ...
1
vote
0answers
59 views

ACLs on groups of contacts

(CiviCRM 4.6.20, Drupal 7.50) I have had zero luck trying to get this functionality to work. Here is the setup: Created a regular (not smart, didn't want to add that level of potential caching ...
1
vote
0answers
51 views

How to use ACL to just edit custom fields for memberships

I'm using CiviCRM mainly for membership signup (in wordpress). Now I have created a profile (a custom field set) to ask for extra info upon member signup (the signup happens via a contribution page). ...
1
vote
0answers
58 views

WordPress ACLs and PCPs

This is I'm sure specific to WordPress as I get the impression from reading that ACLs in Wordpress are as well developed as in Drupal or Joomla. Currently, to give someone access to the "Personal ...
0
votes
0answers
14 views

Manage ACLs for contact groups

I'm trying to limit access for a group of contacts. Let's assume that my contacts groups separated accordingly: Regular Contacts Volunteers Staff members Admins So for example I want that regular ...
0
votes
0answers
12 views

Civicrm and Joomla ACL

I have a fresh install of Joomla with CiviCRM 5.3.5 installed. I can’t seem to get the CiviCRM ACL to take over instead of Joomla’s All or nothing permissions. Documentation doesn’t seem to explain ...
0
votes
0answers
20 views

Users cannot view ACL groups in search that they should see. Why?

Users have ACL access to just a couple of groups, one of which is a smart group and a subset of the other. Although they can see all the contacts that they should, when going to 'Search' and select '...
0
votes
1answer
27 views

How to automatically create relationship between Drupal role user and a group of civi contacts?

I have webform where volunteers signup for newsletter. They land on group called "Volunteer". Our volunteer co-ordinator users are in a drupal role called "Coordinator" What I want ...
0
votes
1answer
41 views

How can I prevent users editing custom fields for contacts not in their ACL group?

Using Wordpress 5.4.1 with Civi 5.24.3. We have a smart group used for ACL which prevents the core "Edit" button being shown on the contact summary. There is also an ACL entry for a group of ...
0
votes
0answers
11 views

Manage members of the OG_Sync Access Control Group

We are using Drupal Organic Groups, and the OG_Sync function that ships with CiviCRM Core to create corresponding CiviCRM Groups. We are converting from an existing system where all editing is ...
0
votes
2answers
38 views

Feature request: Relate memberships to Groups and have separate access

Overview I have a number of groups. Each group has one or more memberships. With ACL I can discern between the access to the different groups and their contacts. However, when access is granted, the ...
0
votes
0answers
13 views

Can I control access to specific price sets with ACL?

I have two primary member types. Full Members (FM) and Associate Members (AM). I need to keep all the pricing for both groups completely separate and since AM joins to have access to FM, they pay all ...