Questions tagged [acl]

Access Control Limits which may refer to CiviCRM inbuilt ACL options, or options provided by extensions that deliver Access Control

Filter by
Sorted by
Tagged with
12
votes
5answers
210 views

How do I prevent a user from adding contacts to ACL groups?

I have successfully set up CiviCRM ACLs so that only contacts within the group "NYC Team" have access to certain events. What I am trying to figure out is how to prevent low-level users from adding ...
9
votes
2answers
406 views

Multi-level Organization ACL Permissions

For my first CiviCRM implementation I need to set it up for an organization that has several national branches, each with a number of centres. Contacts belong to a centre and therefore its country. ...
8
votes
6answers
177 views

Allowing contacts of contacts?

Background We're a membership association for music groups, and are in the process of building our new website, using Civi as both the CRM and for some of the functionality, events etc., of the ...
8
votes
1answer
94 views

How do I find more information about the ACL regression introduced in 4.6.7?

Email was received stating If you are currently using 4.6.7 and your site uses ACLs to segment access to contacts you are strongly encouraged to upgrade. The 4.6.7 release included a regression in ...
7
votes
1answer
105 views

How can I allow non-admin users to manage tags?

I have a Drupal role which I have given the permission CiviCRM: administer Tagsets and CiviCRM: administer reserved tags but not CiviCRM: administer CiviCRM. They still get access denied when ...
7
votes
1answer
96 views

Non-administrators unable to tag contacts using Tags tab

More specifically, when they click tag checkboxes they get the message "API permission check failed for EntityTag/create call; insufficient permission: require access CiviCRM and edit all contacts". ...
6
votes
2answers
137 views

Read-only access to CiviCRM

I would like to enable members of our Board of Directors to view our CiviCRM database without giving them permission to make changes. I.e., read-only access. Can this be done?
6
votes
2answers
65 views

Which Drupal permissions does a user need in order to see and change their relatives (contacts with permissioned relationships) in webform?

I have a webform which users use to register themselves and their family members for events. If users have a login, it automatically populates their family members, who are contacts with permissioned ...
6
votes
1answer
255 views

Permissions, ACL and Groups

I would like to confirm this statements regarding permissions, ACL and groups (Wordpress 4.7.1, civicrm 4.7.15) Permission to edit contacts (ACL or general), allows user to assign contacts to ANY ...
5
votes
2answers
130 views

How to fake a 'deny' ACL

Has anyone ever tried to deny access to a group of custom fields, for particular roles/users? We have a custom-data tab that we'd like only particular roles to see. I know there's no 'deny' ACL, but I'...
5
votes
1answer
267 views

How to grant permissions (ACL) when working with nested groups?

I pushed a topic here that has not yet been solved in the forum and that affects our organizations: http://forum.civicrm.org/index.php?topic=29381 Managing ACLs is really heavy and is very ...
5
votes
0answers
38 views

ACL and Drupal roles

I'm having trouble to correctly setup ACL and Drupal roles (Civicrm 4.6.35 on Drupal 7) I have my contacts assigned to different groups (let's say G1 ... G5) For each group there is a corresponding ...
4
votes
2answers
69 views

Issues using 'Related Permissions Module' with v4.6 of CiviCRM. Will there be an upgrade soon?

We are using CiviCRM Webforms to allow parents to sign-up their events for there children. I am restricting access to related contacts using groups but would like to enforce permissions using 'Related ...
4
votes
2answers
204 views

Allowing group management to users with limited permissions

This may be a shortcoming or bug to-do with access control, but maybe I'm missing something. I've setup Drupal permissions and ACLs and they are working 100% except for one thing: users can only ...
4
votes
1answer
219 views

Creating ACL for Smart Groups

Is it possible to create an ACL associated with a Smart Group? I'm attempting to create a members directory that is only accessible to members. I can't seem to get it working. Here's what I've done ...
3
votes
3answers
214 views

Access denied on price set page

I have this problem https://forum.civicrm.org/index.php?topic=36211.0 'access denied' for administrator on the price set admin page civicrm/admin/price?reset=1&action=add using civicrm 4.5.3 ...
3
votes
1answer
35 views

Can I set permissions to see one type of contribution, but not another?

We have a number of staff who should have access to see event payment information, but who should not see donation information. Is there a way to set permissions via ACL or otherwise based on ...
3
votes
1answer
131 views

Users with Case roles cannot edit activities assigned to them: is this a bug?

first post so please forgive any netiquette transgressions. I'm following the guide https://civicrm.org/bug-reporting to get confirmation this is a bug. Version: 4.6.12 (also present in 4.7.1) CMS: ...
3
votes
1answer
95 views

How do user permissions work for multi-level organizations?

We are currently using Action Network for our CRM (even though it is not designed for that), marketing and digital mobilising tools. We moved to them because of their system of parent/sibling/child ...
3
votes
1answer
60 views

How to control API4 permissions for CRUD operations?

How do I control permissions for API4 calls?
3
votes
1answer
578 views

Creating a public Members directory with CiviCRM in Wordpress using Profiles and shortcode

Issue at hand is shortcode output of permissions error. Anons and logged in users of all kinds can view whole list at ?page=CiviCRM&q=civicrm%2Fprofile&force=1&gid=14 without issue. ...
3
votes
2answers
69 views

CiviMail shows unexpected groups when selecting recipients

I create a new email and go to choose "Recipients". I see a full list of all groups. This includes groups I shouldn't be allowed to see (per ACL rules), and groups that do not have the "mailing list" ...
3
votes
2answers
621 views

How to design ACL for a multi-level organisation

We have an Organisation with cca. 400 local branches and have trying to achieve a following ACL behaviour: -- Organisation members needs to be able to login and have access to their Organisation ...
3
votes
1answer
38 views

Staff restricted by ACLs cannot use/see any other groups

I have a group of CiviCRM users who are restricted by ACL to only be allowed to view and edit contacts in a certain geographic region (those contacts in a group called "Northern Region"). They also ...
3
votes
1answer
57 views

Is it possible to restrict view to certain case activities?

We are currently evaluating CiviCRM 5.4.1 and CiviCase on Wordpress 4.9.8 One of the requirements is to limit access to certain activity types. In simple words, some users are not allowed to view ...
3
votes
3answers
153 views

ACL permissions Activities

I'm trying to make a permission, to limit view some activities types (A user with a specific role can't view a some activities types) I was checking the hook permissions but i don't find the way(...
3
votes
1answer
113 views

Inconsistent ACL behaviour

We recently started using ACLs to fine-tune access to custom fields. Roughly speaking, our setup is: all authenticated users can access custom field group 1 role 1 can access field groups 2, 3, 4 ...
3
votes
1answer
16 views

Dashboard Summary on Memberships Page

I've just found out that the Membership Dashboard - specifically the summary table at the top of that page - is not visible if you don't have the permission 'CiviCRM: view all contacts'. Is there any ...
3
votes
2answers
44 views

CiviCRM: how to manage several areas for the same organization?

Good afternoon, we are analyzing CiviCRM as a possible solution for our organization. It is a governmental entity and in the same there is more than one area that is in a position to use CiviCRM to ...
3
votes
1answer
55 views

Using ACL for event registration

I have a use case where there are public and non public events. Public events should be seen by everyone and can be registered for. Non public events should only be seen and registerable for a certain ...
2
votes
4answers
76 views

Capacity Planning

We would like to propose the utilization of CiviCRM in a big organization. They have 140.000 contacts, that manage more then 1.000.000 activities each year (including mails, contributions, etc), and ...
2
votes
1answer
27 views

How can I preview the event info of a non-active event?

To ensure that the event information page looks as I want, I'd like to preview it before I activate the event. When I do that I get a "no authorization" with a big fat 0 (zero). I'm running Joomla so ...
2
votes
2answers
63 views

Drupal's cron job has no access to CiviCRM custom fields (Anon access to custom data?)

We're using a Drupal module (CiviNorth) which hooks into Drupal's cron execution and updates civicrm's records' custom fields. This has been failing due to the API calls not returning those custom ...
2
votes
1answer
99 views

CiviCRM Entity and ACL Permissions

We are a federated political organisation migrating to CiviCRM 4.6. I have integrated CiviCRM with Drupal views and civicrm_entity so we can create customised search pages for local organisers. I'm ...
2
votes
1answer
52 views

Non-administrators unable to tag contacts using Tags tab redux

I'd like to draw attention to a flaw in the ACL permissioning. I'm a volunteer setting up a national database for a new non-profit, but I want non-admins to be able to edit the data for their state ...
2
votes
1answer
148 views

Using ACLs to manage access to contacts

As I understand it I can use CiviCRM's Access Control Lists to to control the groups that users can see and work with. But I'm not clear on a few points about this: If a user does not have the ...
2
votes
1answer
36 views

Simple way to prevent one user seeing one contact

My user would like a particular case worker to be prevented from accessing one specific client. At present we're not using ACLs but I implemented one scheme that I could get to work on my test system ...
2
votes
1answer
47 views

Create programmatically a ACL logic

I have a need to create programmatically (from a csv) a complete ACL structure. In detail for each csv line i need to create the CMS user (Joomla) with a specific role the connected contact the ...
2
votes
2answers
44 views

ACL role assignments not showing on screen, but still working

When I go to civicrm/acl/entityrole it shows no role assignments and says "There are no Role Assignments. You can add one now." But they exist, have not been deleted and are still working. I can see ...
2
votes
3answers
50 views

Smart Groups - Contacts by Adder

My basic need is to allow a CiviCRM user to view and edit only the Contacts they have added. It seems that to support that requirement, I need a Smart Group of Contacts, filtered by Adder. I see ...
2
votes
3answers
136 views

Restricting users in the same group to view/edit ONLY their own contact details

Restricting users in the same group to ONLY edit their own contact details. I do not want to create separate group for each contact and then put the restriction. I have many contacts in one group and ...
2
votes
2answers
26 views

How do I sync contacts who are not members in Wordpress?

My client organization only has organizational members, but provides services and events to individuals connected to the organization. The WP Member sync, seems limited to only syncing members. I ...
2
votes
1answer
35 views

Different Contacts of same child Group in multisite

I use a multi-site CiviCRM installation with the CiviCRM Multisite extension installed and tuned : having Multi Site Configuration enabled and each site set with a Domain Group. I set all the proper ...
2
votes
1answer
32 views

Way to display non-public events to employees

Our organization has a variety of public events as well as private events. In many cases, I need volunteers/employees to see the private events so they can register to assist, etc. Is it possible ...
2
votes
2answers
55 views

civicrm report access

I am trying to limit access to reports using acl/groups as mentioned in the userguide : https://docs.civicrm.org/user/en/4.7/reporting/set-up/#define-report-settings However, the field to set this ...
2
votes
1answer
60 views

Multi-Record Custom Data Set - Permissions (View/Edit)

I am using some multi-record custom data sets and they are working well. I have been able to import records, use them in reports, use them in searches, add/edit and delete records. All seems to work ...
2
votes
2answers
133 views

ACL controls not working with smart groups?

I submitted a bug on an ACL problem in Nov 2014. CRM-15662. It was fixed in 4.5.5, and I tested it as working. This appears to be broken again in 4.7.1. I have not tried to use this feature in a year ...
2
votes
1answer
33 views

CiviCRM access for Wordpress custom group users

I am using CiviCRM 5.8.1 (update to 5.8.2 will be done shortly) on Wordpress 5.0.1 with German localization. For extended permission management on WP, I use Advanced Access Manager. I created a group ...
2
votes
1answer
104 views

Access Control issue in CiviCRM with Groups?

Hoping the CiviCRM expertise here within stackexchange can provide some guidance on a warning I'm seeing... When an Anonymous individual on our WordPress CiviCRM site has a Group (Mailing List) ...
2
votes
1answer
55 views

Establishing Group Based Permissions to Limit Display of Content to Logged In User

I have a Drupal / Civi application running which uses ACL to restrict contact data to the Drupal user whom is a member of the Group (the Group Admin). Currently I have 5 Groups. However, each Group ...