Skip to main content
7 votes
Accepted

Can I set permissions to see one type of contribution, but not another?

A few years after the question was asked ... the answer is yes! Financial ACL's were added a while back but the docs have not been updated yet. Go to Administer > CiviContribute > ...
Aidan's user avatar
  • 13.5k
5 votes

How to control API4 permissions for CRUD operations?

Events The API kernel broadcasts an authorise event. Core permission check listener The main API permission check subscriber will respond to the event by: $apiRequest = $event->getApiRequest(); ...
ErichBSchulz's user avatar
  • 1,571
5 votes
Accepted

DB Error: constraint violation on anonymous user contribution/membership registration after 5.8.2 -> 5.9.0 update

This is a core bug and Eileen has send a PR for the fix. Will you be able to try by applying the patch from here? If the patch works for you than please comment your test result on PR so that it ...
Pradeep Nayak's user avatar
4 votes
Accepted

CiviCRM Entity and ACL Permissions

I wish i would have seen this question earlier, I can certainly help you out. checkout civicrm_entity.api.php in the civicrm_entity module I don't believe the controller is checking the ACL's when ...
jackrabbithanna's user avatar
4 votes

ACL permissions Activities

You can install the Activity Type ACL extension to do this.
Jon G - Megaphone Tech's user avatar
4 votes

Suitable for online social group?

Yes, CiviCRM can do all of these things. It is also a very flexible system with a number of extensions that provide additional functionality that you may need in future. To get a better idea of what ...
William Mortada's user avatar
4 votes

Creating ACL for Smart Groups

Smart Groups could be a pain in the ass in CiviCRM. They are a powerful feature but when it does not work it is hard to get it working again. There are some alternatives to smart groups. The SQL ...
Jaap Jansma - CiviCooP's user avatar
4 votes

How do user permissions work for multi-level organizations?

Yes - I've done this several times. Many organizations with a chapter/branch format do this, such as IMBA, Wikimedia Foundation, the Australian Green Party, and many others. There are several ...
Jon G - Megaphone Tech's user avatar
4 votes
Accepted

Custom Data ACLs

This will allow to view/edit a custom data field set for every contact the user has view/edit permissions. Despite the option named Edit there is currently no difference to View, as descibed in the ...
Thomas Schüttler's user avatar
4 votes
Accepted

Assign all contacts created by a user to one group automatically?

As per Erik's suggestion I created a new condition. It will be included in the next version of civirules (2.12). If you would like to get it before the official release of the new version you can ...
Marko's user avatar
  • 877
4 votes

Is it possible to have a user that's only capability is to work with Mosaico. Specifically to Create/modify templates

Unfortunately there is no single Mosaico privilege. You would achieve what you want using a combination of CMS permissions and CiviCRM ACL. I would do the following: Create a special account for this ...
Marko's user avatar
  • 877
4 votes

Why is the access control option not available for smart groups anymore? Fresh install

Access control for the smart group was never supported AFAIK. Only for static groups
Pradeep Nayak's user avatar
4 votes

How can I control access to events based on user role and event type?

May be using ACLWhere clause hook can be achieved what you need or may be using https://civicrm.org/extensions/member-only-event as an alternate approach
Pradeep Nayak's user avatar
3 votes

How do I prevent a user from adding contacts to ACL groups?

There is a useful little CiviCoop extension called group-protect to mark a group as protected. You can use this to protect your ACL groups and assign a permission to those who should edit them.
Aidan's user avatar
  • 13.5k
3 votes

Capacity Planning

There are certainly instances with much larger numbers of contacts than you are describing. We have several in the range of .5-1 million contacts and of course the associated activities etc. And there ...
petednz - fuzion's user avatar
  • 28.4k
3 votes
Accepted

Dashlets not available to be added to Dashboard

If I recall correctly, this is down to some peculiarity of the dashlet permissions. If you go to the Access tab of the report in question, you'll see two ways to set the permissions (see screenshot ...
Jon G - Megaphone Tech's user avatar
3 votes
Accepted

Create programmatically a ACL logic

Yes, the API is definitely the correct approach. Writing via SQL may work for now, but isn't guaranteed to in the future. For the first item (creating the Joomla) user, I can't offer help, since ...
Jon G - Megaphone Tech's user avatar
3 votes
Accepted

How to automatically add contacts to a group that matches the ACL?

As I didn't hear from anyone, I figured I'd just write the extension. Artful Robot's AutoGroup Extension is here for your delight and delectation. From the README: This extension allows you to choose ...
artfulrobot's user avatar
  • 3,932
3 votes

Simple way to prevent one user seeing one contact

You could do that with hook_civicrm_aclWhereClause: remove 'view all contacts', 'edit all contacts' for the case worker create an extension implementing hook_civicrm_aclWhereClause eg: function ...
Aidan's user avatar
  • 13.5k
3 votes
Accepted

Is it possible to restrict view to certain case activities?

Yes - you can install the Activity Type ACL extension which will give you permissions on a per-activity type basis.
Jon G - Megaphone Tech's user avatar
3 votes
Accepted

What is 'object_table' and 'object_id' in Acl API?

Object table is the type of data the ACL is operating on. For eg: if you want to create an ACL which grants permission for an event - object table, in this case, will be civicrm_event. Object id is ...
jitendra - fuzion's user avatar
3 votes
Accepted

Staff restricted by ACLs cannot use/see any other groups

The core issue is that CiviCRM's in-built ACLs don't distinguish between access to view a group and access to view the group's contacts. However, extension-based ACLs CAN distinguish. So my solution ...
Jon G - Megaphone Tech's user avatar
3 votes

Private content for event participant?

I would use the CiviRules extension, you could structure it something like - if registered participant of 'X' event, send email of 'X' template. With this you could just create an email template for ...
Laura's user avatar
  • 392
3 votes

Assign all contacts created by a user to one group automatically?

You are correct that there is currently no condition to check if a contact was added by a specific user. It would not be too much work (estimate about 2 hours) to add that condition to CiviRules. It ...
ErikH - CiviCooP's user avatar
3 votes
Accepted

Hide contact types from WordPress cms users

I think ACLs should be able to resolve your requirement, you just have to reverse your thinking, so the Group who you want to give limited access to do NOT get given 'Access all Contacts' (or whatever ...
petednz - fuzion's user avatar
  • 28.4k
2 votes

ACL controls not working with smart groups?

I think this was an issue of misunderstanding. An ACL can have a target of a Smart Group, but the Group that contains the people who are permitted to access the target contacts must be a standard ...
petednz - fuzion's user avatar
  • 28.4k
2 votes

Issues using 'Related Permissions Module' with v4.6 of CiviCRM. Will there be an upgrade soon?

Although the extension is still listed as v1.2, there have been recent updates to the codebase which have helped us with a conflict with CiviMail in 4.7.10. Once installed, the info lists ...
Phil Hart's user avatar
  • 327
2 votes

Which Drupal permissions does a user need in order to see and change their relatives (contacts with permissioned relationships) in webform?

You're looking for the Relationship Permissions as ACL extension.
Jon G - Megaphone Tech's user avatar
2 votes
Accepted

Smart Groups - Contacts by Adder

This is what I have discovered through further trial and error. To search on Changelog by Added or Modified, use first name, last name, or last, first. Using both names separated by a space will not ...
user6590595's user avatar
2 votes

Suitable for online social group?

Agree with William, and on top of that you might also check some of the YouTube videos here: https://www.youtube.com/playlist?list=PLjSU7YfE0E03DWaWNTLemvtQR30PzcB_o
ErikH - CiviCooP's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible