Hot answers tagged

9 votes

How do I prevent a user from adding contacts to ACL groups?

With situations like that I simply just disable the group. The ACL still works, but users don't have access to add anyone to the group. If you need to add someone else to the group, just enable, add ...
user avatar
  • 1,368
8 votes

Read-only access to CiviCRM

You didn't specify which CMS you're using but between your CMS permissioning and Civi ACLs, that should be possible. See here for some info: http://book.civicrm.org/user/initial-set-up/permissions-...
user avatar
7 votes

How can I allow non-admin users to manage tags?

This is a bug already reported at https://issues.civicrm.org/jira/browse/CRM-15371. Managing tags needs its own permission rather than requiring "administer CiviCRM" permission. Anyone interested in ...
user avatar
  • 6,641
7 votes
Accepted

Can I set permissions to see one type of contribution, but not another?

A few years after the question was asked ... the answer is yes! Financial ACL's were added a while back but the docs have not been updated yet. Go to Administer > CiviContribute > ...
user avatar
  • 10.8k
6 votes
Accepted

How do I find more information about the ACL regression introduced in 4.6.7?

I've posted an advisory now: CIVI-SA-2015-008: Access bypass in CiviCRM 4.6.7 CiviCRM 4.6.7 introduced an access bypass issue which applied a limited number of sites. The issue affected only certain ...
user avatar
6 votes
Accepted

Access denied on price set page

I had a similar problem (CiviCRM 4.6) and solved it as follows: The price sets kind of belong to the event component, and therefore they require not only "regular" CiviCRM permissions, but also ...
user avatar
  • 3,309
5 votes

Multi-level Organization ACL Permissions

While it's more work to set up, I think you'd be very well served by taking advantage of multi-site capabilities of CiviCRM, especially in conjunction with the excellent Multi-site Permissioning ...
user avatar
5 votes

Issues using 'Related Permissions Module' with v4.6 of CiviCRM. Will there be an upgrade soon?

Good question! It adds fields to the relationship_type form - & the methodology for that broke in 4.5 I believe. So, I believe that if you install the github version Related permissions on 4.6 ...
user avatar
  • 1,890
5 votes
Accepted

Allowing contacts of contacts?

Evan from IMBA here. Sorry for replying in a new answer, I don't have the required 50 points of reputation to comment in reply specifically to Lizz Trudeau's answer. I just watched the video Jason (my ...
user avatar
  • 388
5 votes
Accepted

Using ACLs to manage access to contacts

The ACLs in CiviCRM are only additive. So assuming a user doesn't have the "View All Contacts" or "Edit All Contacts" permissions (which overrides all ACLs), the default is that a user can view zero ...
user avatar
5 votes
Accepted

How can I preview the event info of a non-active event?

Currently the event needs to be active to use (preview) it. If you have an event listing page, you can uncheck Public event. That way users only see the event if you create a link to it. You should ...
user avatar
  • 2,816
5 votes

Users with Case roles cannot edit activities assigned to them: is this a bug?

I've posted a preliminary fix in JIRA. Joseph
user avatar
5 votes

How to control API4 permissions for CRUD operations?

Events The API kernel broadcasts an authorise event. Core permission check listener The main API permission check subscriber will respond to the event by: $apiRequest = $event->getApiRequest(); ...
user avatar
  • 1,561
5 votes
Accepted

DB Error: constraint violation on anonymous user contribution/membership registration after 5.8.2 -> 5.9.0 update

This is a core bug and Eileen has send a PR for the fix. Will you be able to try by applying the patch from here? If the patch works for you than please comment your test result on PR so that it ...
user avatar
4 votes

How to design ACL for a multi-level organisation

IMHO it seems like you really need a consultant for this stuff. Hopefully an organization of your size (400 chapters with an unknown # of people per chatper) has budget for help. But let me offer a ...
user avatar
4 votes

Allowing contacts of contacts?

Two ideas come to mind: If you're more of a federated organization where it would be natural for your members' contacts to be in your database, you could set up a multisite installation. You could ...
user avatar
  • 7,337
4 votes
Accepted

Creating a public Members directory with CiviCRM in Wordpress using Profiles and shortcode

What I figured out is that when inserting the shortcode in mode "view" the URL is http://yoursite.com/civicrm/?page=CiviCRM&q=civicrm/profile/view&reset=1&force=1&gid=14 (which it will ...
user avatar
  • 2,301
4 votes
Accepted

Non-administrators unable to tag contacts using Tags tab redux

I can't really see the use case where "Edit All Contacts" should be required for adding a tag. I think this is something that should be changed. So the solution is to submit a patch or ask a ...
user avatar
4 votes

Drupal's cron job has no access to CiviCRM custom fields (Anon access to custom data?)

You need to turn on "Access all custom data" for anonymous users for a lot of very popular features (e.g. custom fields for anonymous users in profiles and webform_civicrm) to work. Someone else can ...
user avatar
4 votes

Suitable for online social group?

Yes, CiviCRM can do all of these things. It is also a very flexible system with a number of extensions that provide additional functionality that you may need in future. To get a better idea of what ...
user avatar
4 votes

Creating ACL for Smart Groups

Smart Groups could be a pain in the ass in CiviCRM. They are a powerful feature but when it does not work it is hard to get it working again. There are some alternatives to smart groups. The SQL ...
user avatar
4 votes

ACL permissions Activities

You can install the Activity Type ACL extension to do this.
user avatar
4 votes
Accepted

CiviCRM Entity and ACL Permissions

I wish i would have seen this question earlier, I can certainly help you out. checkout civicrm_entity.api.php in the civicrm_entity module I don't believe the controller is checking the ACL's when ...
user avatar
4 votes

How do user permissions work for multi-level organizations?

Yes - I've done this several times. Many organizations with a chapter/branch format do this, such as IMBA, Wikimedia Foundation, the Australian Green Party, and many others. There are several ...
user avatar
4 votes
Accepted

Custom Data ACLs

This will allow to view/edit a custom data field set for every contact the user has view/edit permissions. Despite the option named Edit there is currently no difference to View, as descibed in the ...
user avatar
4 votes
Accepted

Assign all contacts created by a user to one group automatically?

As per Erik's suggestion I created a new condition. It will be included in the next version of civirules (2.12). If you would like to get it before the official release of the new version you can ...
user avatar
  • 867
4 votes

Is it possible to have a user that's only capability is to work with Mosaico. Specifically to Create/modify templates

Unfortunately there is no single Mosaico privilege. You would achieve what you want using a combination of CMS permissions and CiviCRM ACL. I would do the following: Create a special account for this ...
user avatar
  • 867
3 votes

Allowing contacts of contacts?

It will depend on how much of the setting up you (a superadmin) will take care of, eg will you add 'their' payment processors and perhaps set up their Membership pages, to avoid the risk of 'them' ...
user avatar
  • 26.9k
3 votes
Accepted

CiviMail shows unexpected groups when selecting recipients

Similar issue is filed here for which I've submitted a PR at https://github.com/civicrm/civicrm-core/pull/6366 Hope you can see Groups permitted by ACL now:) Update : If you can also see the groups ...
user avatar
3 votes

Inconsistent ACL behaviour

Ugh. This kind of bug is really hard to diagnose. Good call on noticing that memcache caches this behavior. Are you on some kind of host with really aggressive caching by default? WPEngine, for ...
user avatar
  • 7,337

Only top scored, non community-wiki answers of a minimum length are eligible