7
votes
Accepted
Can I set permissions to see one type of contribution, but not another?
A few years after the question was asked ... the answer is yes!
Financial ACL's were added a while back but the docs have not been updated yet.
Go to Administer > CiviContribute > ...
- 13.6k
5
votes
How to control API4 permissions for CRUD operations?
Events
The API kernel broadcasts an authorise event.
Core permission check listener
The main API permission check subscriber will respond to the event by:
$apiRequest = $event->getApiRequest(); ...
- 1,571
5
votes
Accepted
DB Error: constraint violation on anonymous user contribution/membership registration after 5.8.2 -> 5.9.0 update
This is a core bug and Eileen has send a PR for the fix. Will you be able to try by applying the patch from here?
If the patch works for you than please comment your test result on PR so that it ...
- 34.5k
4
votes
Accepted
CiviCRM Entity and ACL Permissions
I wish i would have seen this question earlier, I can certainly help you out.
checkout civicrm_entity.api.php in the civicrm_entity module
I don't believe the controller is checking the ACL's when ...
- 2,019
4
votes
4
votes
Creating ACL for Smart Groups
Smart Groups could be a pain in the ass in CiviCRM. They are a powerful feature but when it does not work it is hard to get it working again.
There are some alternatives to smart groups. The SQL ...
- 3,641
4
votes
How do user permissions work for multi-level organizations?
Yes - I've done this several times. Many organizations with a chapter/branch format do this, such as IMBA, Wikimedia Foundation, the Australian Green Party, and many others.
There are several ...
- 39.4k
4
votes
Accepted
Custom Data ACLs
This will allow to view/edit a custom data field set for every contact the user has view/edit permissions.
Despite the option named Edit there is currently no difference to View, as descibed in the ...
- 1,113
4
votes
Accepted
Assign all contacts created by a user to one group automatically?
As per Erik's suggestion I created a new condition.
It will be included in the next version of civirules (2.12).
If you would like to get it before the official release of the new version you can ...
- 887
4
votes
Is it possible to have a user that's only capability is to work with Mosaico. Specifically to Create/modify templates
Unfortunately there is no single Mosaico privilege. You would achieve what you want using a combination of CMS permissions and CiviCRM ACL.
I would do the following:
Create a special account for this ...
- 887
4
votes
Why is the access control option not available for smart groups anymore? Fresh install
Access control for the smart group was never supported AFAIK. Only for static groups
- 34.5k
4
votes
How can I control access to events based on user role and event type?
May be using ACLWhere clause hook can be achieved what you need
or may be using https://civicrm.org/extensions/member-only-event as an alternate approach
- 34.5k
3
votes
How do I prevent a user from adding contacts to ACL groups?
There is a useful little CiviCoop extension called group-protect to mark a group as protected. You can use this to protect your ACL groups and assign a permission to those who should edit them.
- 13.6k
3
votes
Capacity Planning
There are certainly instances with much larger numbers of contacts than you are describing. We have several in the range of .5-1 million contacts and of course the associated activities etc. And there ...
- 28.6k
3
votes
Accepted
Dashlets not available to be added to Dashboard
If I recall correctly, this is down to some peculiarity of the dashlet permissions. If you go to the Access tab of the report in question, you'll see two ways to set the permissions (see screenshot ...
- 39.4k
3
votes
Accepted
Create programmatically a ACL logic
Yes, the API is definitely the correct approach. Writing via SQL may work for now, but isn't guaranteed to in the future.
For the first item (creating the Joomla) user, I can't offer help, since ...
- 39.4k
3
votes
Accepted
How to automatically add contacts to a group that matches the ACL?
As I didn't hear from anyone, I figured I'd just write the extension.
Artful Robot's AutoGroup Extension is here for your delight and delectation.
From the README:
This extension allows you to choose ...
- 3,932
3
votes
Simple way to prevent one user seeing one contact
You could do that with hook_civicrm_aclWhereClause:
remove 'view all contacts', 'edit all contacts' for the case worker
create an extension implementing hook_civicrm_aclWhereClause eg:
function ...
- 13.6k
3
votes
Accepted
Is it possible to restrict view to certain case activities?
Yes - you can install the Activity Type ACL extension which will give you permissions on a per-activity type basis.
- 39.4k
3
votes
Accepted
What is 'object_table' and 'object_id' in Acl API?
Object table is the type of data the ACL is operating on.
For eg: if you want to create an ACL which grants permission for an event - object table, in this case, will be civicrm_event.
Object id is ...
- 7,191
3
votes
Accepted
Staff restricted by ACLs cannot use/see any other groups
The core issue is that CiviCRM's in-built ACLs don't distinguish between access to view a group and access to view the group's contacts.
However, extension-based ACLs CAN distinguish. So my solution ...
- 39.4k
3
votes
Private content for event participant?
I would use the CiviRules extension, you could structure it something like - if registered participant of 'X' event, send email of 'X' template.
With this you could just create an email template for ...
- 392
3
votes
Assign all contacts created by a user to one group automatically?
You are correct that there is currently no condition to check if a contact was added by a specific user. It would not be too much work (estimate about 2 hours) to add that condition to CiviRules. It ...
- 11.9k
3
votes
Accepted
Hide contact types from WordPress cms users
I think ACLs should be able to resolve your requirement, you just have to reverse your thinking, so the Group who you want to give limited access to do NOT get given 'Access all Contacts' (or whatever ...
- 28.6k
2
votes
Issues using 'Related Permissions Module' with v4.6 of CiviCRM. Will there be an upgrade soon?
Although the extension is still listed as v1.2, there have been recent updates to the codebase which have helped us with a conflict with CiviMail in 4.7.10.
Once installed, the info lists ...
- 327
2
votes
Which Drupal permissions does a user need in order to see and change their relatives (contacts with permissioned relationships) in webform?
You're looking for the Relationship Permissions as ACL extension.
- 39.4k
2
votes
Accepted
Smart Groups - Contacts by Adder
This is what I have discovered through further trial and error.
To search on Changelog by Added or Modified, use first name, last name, or last, first. Using both names separated by a space will not ...
- 41
2
votes
Accepted
ACL with nested groups
This may not fit your scenario, but for others we have been able to provide this by using Relationships to 'join the dots'
If someone (X) has Permissioned Relationship to Org 1
and Org 1 has ...
- 28.6k
2
votes
Multi-Record Custom Data Set - Permissions (View/Edit)
Probably not the answer you were hoping for :-(, but confirming that is a current limitation. ACL's for custom data do not distinguish between View & Edit. On the New ACL screen, when you set ...
- 13.6k
2
votes
Capacity Planning
Several organizations use CiviCRM with similar needs. Wikimedia Foundation and Australian Green Party have very similar requirements, for example.
- 39.4k
Only top scored, non community-wiki answers of a minimum length are eligible