9
votes
Accepted
is there any way to restrict data export?
Yes, it is now possible. I didn't hear from Kboy so I wrote an extension myself:
https://github.com/progressivetech/net.ourpowerbase.exportpermission
- 1,256
8
votes
Access denied for specific role
We had the same issue and same resolution, but agree, it doesn't feel right. I opened an issue in the lab but couldn't find anything else: https://lab.civicrm.org/dev/drupal/issues/45
EDIT: ...
- 311
7
votes
Accepted
Can I set permissions to see one type of contribution, but not another?
A few years after the question was asked ... the answer is yes!
Financial ACL's were added a while back but the docs have not been updated yet.
Go to Administer > CiviContribute > ...
- 13.6k
7
votes
Accepted
Can't save Drupal role permissions for CiviCRM
Will permissions for non-civicrm related permissions "stick"? If not I've seen this problem before when there are too many roles/permissions on the form. Drupal commons installs a lot of modules, so ...
- 2,019
7
votes
Accepted
Access Denied to CiviMail Opt-Out Form
There is a permission for it. Go to your Drupal -> People -> Permissions and give anonymous (and authenticated) permission to Unsubscribe:
Access CiviMail subscribe/unsubscribe pages
- 15.2k
6
votes
Accepted
Silent error when accessing php API has not logged in user
The recommended way to include the necessary files to run the php API is to call civicrm_initialize() before the API call.
- 126
6
votes
Access denied for specific role
I solved this with trial and error. I had to grant access to :
CiviCRM: access CiviCRM backend and API
Master control for access to the main CiviCRM backend and API. Give to trusted roles only.
I'...
- 195
6
votes
Accepted
Custom permission through UI
Pushed Custom permission extension, where you can create your own permission through UI by navigating to CiviCRM >> Administrator >> Customize Data and Screens >> Custom Permissions
- 34.5k
5
votes
Accepted
Only logged in users can change billing and recurring amount
Two bits are required for anonymous users to be able to access URLs like:
/civicrm/contribute/updatebilling?reset=1&coid=4263&cs=b88004e51f6c99b0601aceab7e489315_1530392348_168
Permissions: ...
- 15.2k
5
votes
Accepted
View contacts but not activities
I guess Activity type ACL extension will do your job. This extension provides additional permission for each activity type. By default its set to false for all activity type.
HTH
Pradeep
- 34.5k
5
votes
Form Builder Not updaing details
I was experiencing a similar issue, the difference for me is I have a public facing form that allows non-logged in users to submit the form to create individuals in Civi. Located on the Form Settings ...
- 61
4
votes
Accepted
Problems with first test site using Civicrm buildkit
Accessing URL http://localhost:7979 requires at least these things:
Your client is able to resolve host localhost to the local IP address
You have a server which is listening to port 7979
Your server ...
- 9,902
4
votes
Strange 'Permission Denied' message when browsing to CiviCRM home page
The errors in your log that you note are not a problem, they are CiviCRM doing a little security check for you (and succeeding).
I've seen this occasionally on my servers, and especially on my ...
- 6,921
4
votes
Accepted
CiviCRM Entity and ACL Permissions
I wish i would have seen this question earlier, I can certainly help you out.
checkout civicrm_entity.api.php in the civicrm_entity module
I don't believe the controller is checking the ACL's when ...
- 2,019
4
votes
templates_c cache files not being deleted
Cache files are cleared by a scheduled job, which isn't enabled by default.
Go to Administer menu » System Settings » Scheduled Jobs.
Find the row labeled Clean-up Temporary Data and Files.
On that ...
- 39.4k
4
votes
How do user permissions work for multi-level organizations?
Yes - I've done this several times. Many organizations with a chapter/branch format do this, such as IMBA, Wikimedia Foundation, the Australian Green Party, and many others.
There are several ...
- 39.4k
4
votes
How to allow anonymous user to edit their contact details on CiviCRM?
The link is missing checksum parameter(cs). It should be
https://example.com/civicrm/profile/edit?gid=48&id=8949&cs=11e24e6f361dceacd63ea0120b00c871&reset=1
Thanks
Pradeep
- 34.5k
4
votes
CiviMember permission issue on net new Wordpress install
It seems I had to add a Price set in Memberships before I could go further. Doh! Please excuse my ignorance and ignore the question.
- 81
4
votes
Accepted
Administer CiviCRM vs. administer CiviCRM System
There are some implied permissions which you can see here: https://github.com/civicrm/civicrm-core/blob/3bb9adfc8b7b19d8ef5cb5e27b981bd9b61b8769/CRM/Core/Permission.php#L898
public static function ...
- 24k
4
votes
Accepted
Sharing access to a search kit display table with non-admin user
Alright, in case this is useful for anyone else -- it looks like the answer was that I needed to be embedding my Search Kit search into Form Builder rather than just the using the Search Kit displays.
...
- 113
3
votes
Accepted
A question on my ability to import?
You do need permissions like import contacts to import contacts. You will need to ask for that permission to be added to your current role.
The permissions for various import functionalities are ...
- 9,902
3
votes
Accepted
allow anonymous users to view profiles in WordPress?
Go to CiviCRM's **Administer menu » Users and Permissions » Permissions
(Access Control).
Click "WordPress Access Control".
In the "Anonymous User" column, check "CiviCRM: profile view".
If your ...
- 39.4k
3
votes
Accepted
Dashlets not available to be added to Dashboard
If I recall correctly, this is down to some peculiarity of the dashlet permissions. If you go to the Access tab of the report in question, you'll see two ways to set the permissions (see screenshot ...
- 39.4k
3
votes
API permission check failed: CiviEvents Fails after update to 4.7.19 and 4.7.20
I ran in to this on an inherited site. It fixed itself once I removed the permission for "access CiviEvent" (which i assume had been erroneously given by previous developers)
Once removed the other ...
- 28.6k
3
votes
How to restrict access to CiviMail's reports, e.g. click rates
I think you can bypass using permission_check hook.
- 34.5k
3
votes
Permissions for new files under tempates_c/en_US created using 751 permission which does not allow write for group
I always # sudo -u apache drush [command] when running drush anyway. That way if drush creates new files or directories they JustWork(tm) in drupal.
- 302
3
votes
Anonymous users can't View details of a Contact in a public directory Listing
It is not possible to expose contacts to anonymous users.
The only place where this is possible is with registered participants for an event because you could create a public participant listing.
...
- 3,641
3
votes
Accepted
What Permission to view a user's own Profile/Dashboard
Dashboard & Permissions
If you want to give the user ability to see information on themself, the permission seems to be CiviCRM: access Contact Dashboard. (I expected CiviCRM: view my contact to ...
- 9,902
3
votes
What Permission to view a user's own Profile/Dashboard
Consider Profiles
Another common method for exposing a limited set of fields for users to self-manage is a Profile, allows contacts to edit specific fields only. Advantages of Profiles include:
Not ...
- 9,902
3
votes
What Permission to view a user's own Profile/Dashboard
... and then there is Views
if you really want to fine tune what the user can 'see' then either directing them to a drupal path with various Views Blocks, or adding those Views Blocks to show on the ...
- 28.6k
Only top scored, non community-wiki answers of a minimum length are eligible