9
votes
Accepted
is there any way to restrict data export?
Yes, it is now possible. I didn't hear from Kboy so I wrote an extension myself:
https://github.com/progressivetech/net.ourpowerbase.exportpermission
8
votes
Read-only access to CiviCRM
You didn't specify which CMS you're using but between your CMS permissioning and Civi ACLs, that should be possible. See here for some info: http://book.civicrm.org/user/initial-set-up/permissions-...
8
votes
Access denied for specific role
We had the same issue and same resolution, but agree, it doesn't feel right. I opened an issue in the lab but couldn't find anything else: https://lab.civicrm.org/dev/drupal/issues/45
EDIT: ...
7
votes
Accepted
Can I set permissions to see one type of contribution, but not another?
A few years after the question was asked ... the answer is yes!
Financial ACL's were added a while back but the docs have not been updated yet.
Go to Administer > CiviContribute > ...
7
votes
Accepted
Can't save Drupal role permissions for CiviCRM
Will permissions for non-civicrm related permissions "stick"? If not I've seen this problem before when there are too many roles/permissions on the form. Drupal commons installs a lot of modules, so ...
7
votes
Accepted
Access Denied to CiviMail Opt-Out Form
There is a permission for it. Go to your Drupal -> People -> Permissions and give anonymous (and authenticated) permission to Unsubscribe:
Access CiviMail subscribe/unsubscribe pages
6
votes
Accepted
Silent error when accessing php API has not logged in user
The recommended way to include the necessary files to run the php API is to call civicrm_initialize() before the API call.
6
votes
Access denied for specific role
I solved this with trial and error. I had to grant access to :
CiviCRM: access CiviCRM backend and API
Master control for access to the main CiviCRM backend and API. Give to trusted roles only.
I'...
6
votes
Accepted
Custom permission through UI
Pushed Custom permission extension, where you can create your own permission through UI by navigating to CiviCRM >> Administrator >> Customize Data and Screens >> Custom Permissions
5
votes
Accepted
How can I preview the event info of a non-active event?
Currently the event needs to be active to use (preview) it.
If you have an event listing page, you can uncheck Public event. That way users only see the event if you create a link to it. You should ...
5
votes
Accepted
Are there recommended directory ownership and permission settings for CiviCRM files?
What you want
You want the webserver to have read-only access to all the files and dirs or the site can't function.
You want the webserver to have read-write access to all the files it's expected to ...
5
votes
Users with Case roles cannot edit activities assigned to them: is this a bug?
I've posted a preliminary fix in JIRA.
Joseph
5
votes
Accepted
Only logged in users can change billing and recurring amount
Two bits are required for anonymous users to be able to access URLs like:
/civicrm/contribute/updatebilling?reset=1&coid=4263&cs=b88004e51f6c99b0601aceab7e489315_1530392348_168
Permissions: ...
5
votes
Accepted
View contacts but not activities
I guess Activity type ACL extension will do your job. This extension provides additional permission for each activity type. By default its set to false for all activity type.
HTH
Pradeep
4
votes
Access Denied on one computer, but not another using same user
Are you sure the two computers access the same address? It's a common mistake to have both www.yourdomain.org and yourdomain.org (without the www) that display the same pages.
Unfortunately, ...
4
votes
Accepted
Non-administrators unable to tag contacts using Tags tab redux
I can't really see the use case where "Edit All Contacts" should be required for adding a tag. I think this is something that should be changed. So the solution is to submit a patch or ask a ...
4
votes
Unable to write file
Make sure that the folder /var/www/vhosts/examplesite.com/httpdocs/wp-content/plugins/files/civicrm/ is writable to the webserver user.
The simplest solution is to set the permissions on that folder ...
4
votes
How to disable "From email address" for unauthorized users?
You can try following:
Go to Administer-> Customize data and Screens-> Navigation Menu and select Mailing.
From mailing option, do right click and edit on 'From Email Address'.
In the next window, ...
4
votes
Accepted
Allow user to manage mail templates
"edit message templates" is a separate permission in CiviCRM 4.6 (see screenshot below), so you'll get this functionality by upgrading.
Upgrading is also a good idea, since version 4.5 isn't a "Long ...
4
votes
Strange 'Permission Denied' message when browsing to CiviCRM home page
The errors in your log that you note are not a problem, they are CiviCRM doing a little security check for you (and succeeding).
I've seen this occasionally on my servers, and especially on my ...
4
votes
Accepted
CiviCRM Entity and ACL Permissions
I wish i would have seen this question earlier, I can certainly help you out.
checkout civicrm_entity.api.php in the civicrm_entity module
I don't believe the controller is checking the ACL's when ...
4
votes
Accepted
Problems with first test site using Civicrm buildkit
Accessing URL http://localhost:7979 requires at least these things:
Your client is able to resolve host localhost to the local IP address
You have a server which is listening to port 7979
Your server ...
4
votes
templates_c cache files not being deleted
Cache files are cleared by a scheduled job, which isn't enabled by default.
Go to Administer menu » System Settings » Scheduled Jobs.
Find the row labeled Clean-up Temporary Data and Files.
On that ...
4
votes
How do user permissions work for multi-level organizations?
Yes - I've done this several times. Many organizations with a chapter/branch format do this, such as IMBA, Wikimedia Foundation, the Australian Green Party, and many others.
There are several ...
4
votes
How to allow anonymous user to edit their contact details on CiviCRM?
The link is missing checksum parameter(cs). It should be
https://example.com/civicrm/profile/edit?gid=48&id=8949&cs=11e24e6f361dceacd63ea0120b00c871&reset=1
Thanks
Pradeep
4
votes
Accepted
Administer CiviCRM vs. administer CiviCRM System
There are some implied permissions which you can see here: https://github.com/civicrm/civicrm-core/blob/3bb9adfc8b7b19d8ef5cb5e27b981bd9b61b8769/CRM/Core/Permission.php#L898
public static function ...
4
votes
Accepted
Sharing access to a search kit display table with non-admin user
Alright, in case this is useful for anyone else -- it looks like the answer was that I needed to be embedding my Search Kit search into Form Builder rather than just the using the Search Kit displays.
...
3
votes
Our donation pages are down
Andrew West's comment seems to be correct. There are two different things happening here - or three, depending on how you look at it.
The most important is "Permission Denied". I just visited your ...
3
votes
Accepted
How can a user related to an Organization login and be restricted so they only see related members of the organisation
I will try to answer though the english version of your question may mean i guess wrongly.
if the goal is to have John connected to organisation First Co, and Mary connected to organisation Second Co,...
3
votes
Read-only access to CiviCRM
In Drupal (and I would assume the same in other cms) add a new role and give 'access civicrm' permission and also give 'view all contacts'.
This is the minimum permissions setup and should allow them ...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
permissions × 318acl × 56
wordpress × 49
drupal × 32
civievent × 24
civimail × 20
profile × 17
api × 17
groups × 16
relationships × 15
roles × 14
contacts × 13
civicase × 13
joomla × 12
activities × 11
civimember × 10
civicontribute × 9
user × 9
custom-fields × 8
civireport × 8
webform-civicrm × 6
extension × 6
upgrade × 6
registration × 6
tags × 6