9
votes
How do I prevent a user from adding contacts to ACL groups?
With situations like that I simply just disable the group. The ACL still works, but users don't have access to add anyone to the group.
If you need to add someone else to the group, just enable, add ...
- 1,368
8
votes
Read-only access to CiviCRM
You didn't specify which CMS you're using but between your CMS permissioning and Civi ACLs, that should be possible. See here for some info: http://book.civicrm.org/user/initial-set-up/permissions-...
7
votes
How can I allow non-admin users to manage tags?
This is a bug already reported at https://issues.civicrm.org/jira/browse/CRM-15371.
Managing tags needs its own permission rather than requiring "administer CiviCRM" permission. Anyone interested in ...
- 6,641
7
votes
Accepted
Can I set permissions to see one type of contribution, but not another?
A few years after the question was asked ... the answer is yes!
Financial ACL's were added a while back but the docs have not been updated yet.
Go to Administer > CiviContribute > ...
- 10.8k
6
votes
Accepted
How do I find more information about the ACL regression introduced in 4.6.7?
I've posted an advisory now: CIVI-SA-2015-008: Access bypass in CiviCRM 4.6.7
CiviCRM 4.6.7 introduced an access bypass issue which applied a limited number of sites.
The issue affected only certain ...
- 9,812
6
votes
Accepted
Access denied on price set page
I had a similar problem (CiviCRM 4.6) and solved it as follows:
The price sets kind of belong to the event component, and therefore they require not only "regular" CiviCRM permissions, but also ...
- 3,309
5
votes
Multi-level Organization ACL Permissions
While it's more work to set up, I think you'd be very well served by taking advantage of multi-site capabilities of CiviCRM, especially in conjunction with the excellent Multi-site Permissioning ...
- 37.2k
5
votes
Issues using 'Related Permissions Module' with v4.6 of CiviCRM. Will there be an upgrade soon?
Good question!
It adds fields to the relationship_type form - & the methodology for that broke in 4.5 I believe. So, I believe that if you install the github version Related permissions on 4.6 ...
- 1,890
5
votes
Accepted
Allowing contacts of contacts?
Evan from IMBA here. Sorry for replying in a new answer, I don't have the required 50 points of reputation to comment in reply specifically to Lizz Trudeau's answer. I just watched the video Jason (my ...
- 388
5
votes
Accepted
Using ACLs to manage access to contacts
The ACLs in CiviCRM are only additive. So assuming a user doesn't have the "View All Contacts" or "Edit All Contacts" permissions (which overrides all ACLs), the default is that a user can view zero ...
- 37.2k
5
votes
Accepted
How can I preview the event info of a non-active event?
Currently the event needs to be active to use (preview) it.
If you have an event listing page, you can uncheck Public event. That way users only see the event if you create a link to it. You should ...
- 2,816
5
votes
Users with Case roles cannot edit activities assigned to them: is this a bug?
I've posted a preliminary fix in JIRA.
Joseph
- 171
5
votes
How to control API4 permissions for CRUD operations?
Events
The API kernel broadcasts an authorise event.
Core permission check listener
The main API permission check subscriber will respond to the event by:
$apiRequest = $event->getApiRequest(); ...
- 1,561
5
votes
Accepted
DB Error: constraint violation on anonymous user contribution/membership registration after 5.8.2 -> 5.9.0 update
This is a core bug and Eileen has send a PR for the fix. Will you be able to try by applying the patch from here?
If the patch works for you than please comment your test result on PR so that it ...
- 26.6k
4
votes
How to design ACL for a multi-level organisation
IMHO it seems like you really need a consultant for this stuff. Hopefully an organization of your size (400 chapters with an unknown # of people per chatper) has budget for help.
But let me offer a ...
- 742
4
votes
Allowing contacts of contacts?
Two ideas come to mind:
If you're more of a federated organization where it would be natural for your members' contacts to be in your database, you could set up a multisite installation.
You could ...
- 7,337
4
votes
Accepted
Creating a public Members directory with CiviCRM in Wordpress using Profiles and shortcode
What I figured out is that when inserting the shortcode in mode "view" the URL is http://yoursite.com/civicrm/?page=CiviCRM&q=civicrm/profile/view&reset=1&force=1&gid=14 (which it will ...
- 2,301
4
votes
Accepted
Non-administrators unable to tag contacts using Tags tab redux
I can't really see the use case where "Edit All Contacts" should be required for adding a tag. I think this is something that should be changed. So the solution is to submit a patch or ask a ...
- 37.2k
4
votes
Drupal's cron job has no access to CiviCRM custom fields (Anon access to custom data?)
You need to turn on "Access all custom data" for anonymous users for a lot of very popular features (e.g. custom fields for anonymous users in profiles and webform_civicrm) to work. Someone else can ...
- 37.2k
4
votes
Suitable for online social group?
Yes, CiviCRM can do all of these things. It is also a very flexible system with a number of extensions that provide additional functionality that you may need in future.
To get a better idea of what ...
- 3,184
4
votes
Creating ACL for Smart Groups
Smart Groups could be a pain in the ass in CiviCRM. They are a powerful feature but when it does not work it is hard to get it working again.
There are some alternatives to smart groups. The SQL ...
- 3,604
4
votes
4
votes
Accepted
CiviCRM Entity and ACL Permissions
I wish i would have seen this question earlier, I can certainly help you out.
checkout civicrm_entity.api.php in the civicrm_entity module
I don't believe the controller is checking the ACL's when ...
- 1,874
4
votes
How do user permissions work for multi-level organizations?
Yes - I've done this several times. Many organizations with a chapter/branch format do this, such as IMBA, Wikimedia Foundation, the Australian Green Party, and many others.
There are several ...
- 37.2k
4
votes
Accepted
Custom Data ACLs
This will allow to view/edit a custom data field set for every contact the user has view/edit permissions.
Despite the option named Edit there is currently no difference to View, as descibed in the ...
- 1,068
4
votes
Accepted
Assign all contacts created by a user to one group automatically?
As per Erik's suggestion I created a new condition.
It will be included in the next version of civirules (2.12).
If you would like to get it before the official release of the new version you can ...
- 867
4
votes
Is it possible to have a user that's only capability is to work with Mosaico. Specifically to Create/modify templates
Unfortunately there is no single Mosaico privilege. You would achieve what you want using a combination of CMS permissions and CiviCRM ACL.
I would do the following:
Create a special account for this ...
- 867
3
votes
Allowing contacts of contacts?
It will depend on how much of the setting up you (a superadmin) will take care of, eg will you add 'their' payment processors and perhaps set up their Membership pages, to avoid the risk of 'them' ...
- 26.9k
3
votes
Accepted
CiviMail shows unexpected groups when selecting recipients
Similar issue is filed here for which I've submitted a PR at https://github.com/civicrm/civicrm-core/pull/6366
Hope you can see Groups permitted by ACL now:)
Update : If you can also see the groups ...
- 6,886
3
votes
Inconsistent ACL behaviour
Ugh. This kind of bug is really hard to diagnose. Good call on noticing that memcache caches this behavior.
Are you on some kind of host with really aggressive caching by default? WPEngine, for ...
- 7,337
Only top scored, non community-wiki answers of a minimum length are eligible