12 votes
Accepted

**Network Error - Unable to reach the server

If you're not having this trouble but your colleague is, a very common issue is sessions on www/no-www or HTTP/HTTPS URLs. CiviCRM's base URL is hard-coded in the settings file, and while you can ...
user avatar
  • 7,357
9 votes
Accepted

is there any way to restrict data export?

Yes, it is now possible. I didn't hear from Kboy so I wrote an extension myself: https://github.com/progressivetech/net.ourpowerbase.exportpermission
user avatar
  • 1,174
8 votes

Read-only access to CiviCRM

You didn't specify which CMS you're using but between your CMS permissioning and Civi ACLs, that should be possible. See here for some info: http://book.civicrm.org/user/initial-set-up/permissions-...
user avatar
8 votes

Access denied for specific role

We had the same issue and same resolution, but agree, it doesn't feel right. I opened an issue in the lab but couldn't find anything else: https://lab.civicrm.org/dev/drupal/issues/45 EDIT: ...
user avatar
  • 311
7 votes

How can I allow non-admin users to manage tags?

This is a bug already reported at https://issues.civicrm.org/jira/browse/CRM-15371. Managing tags needs its own permission rather than requiring "administer CiviCRM" permission. Anyone interested in ...
user avatar
  • 6,671
7 votes

Setting up an "ethics wall" - anonymous contributions

As far as the end-of-year giving statements are concerned, this has been available in CiviCRM since 4.4, but not documented in the user and admin guide. It is documented in the 4.6 version of the ...
user avatar
  • 3,440
7 votes
Accepted

Can I set permissions to see one type of contribution, but not another?

A few years after the question was asked ... the answer is yes! Financial ACL's were added a while back but the docs have not been updated yet. Go to Administer > CiviContribute > ...
user avatar
  • 11k
7 votes
Accepted

Can't save Drupal role permissions for CiviCRM

Will permissions for non-civicrm related permissions "stick"? If not I've seen this problem before when there are too many roles/permissions on the form. Drupal commons installs a lot of modules, so ...
user avatar
7 votes
Accepted

Access Denied to CiviMail Opt-Out Form

There is a permission for it. Go to your Drupal -> People -> Permissions and give anonymous (and authenticated) permission to Unsubscribe: Access CiviMail subscribe/unsubscribe pages
user avatar
6 votes

Creating a public Members directory with CiviCRM in Wordpress using Profiles

I assume you are seeing this as an anonymous visitor to the site and it fuctions properly if you are logged in. If this is the case, I think you'll need to add anonymous users as able to see the ...
user avatar
  • 355
6 votes

Are there recommended directory ownership and permission settings for CiviCRM files?

These are the Unix/Linux permissions I tend to set my permissions for CiviCRM directories in Drupal 7: chmod 555 sites/default chmod 644 sites/default/settings.php chmod 644 sites/default/civicrm....
user avatar
6 votes
Accepted

Silent error when accessing php API has not logged in user

The recommended way to include the necessary files to run the php API is to call civicrm_initialize() before the API call.
user avatar
  • 126
6 votes

Access denied for specific role

I solved this with trial and error. I had to grant access to : CiviCRM: access CiviCRM backend and API Master control for access to the main CiviCRM backend and API. Give to trusted roles only. I'...
user avatar
6 votes
Accepted

Custom permission through UI

Pushed Custom permission extension, where you can create your own permission through UI by navigating to CiviCRM >> Administrator >> Customize Data and Screens >> Custom Permissions
user avatar
5 votes
Accepted

How do I set up custom permissive relationships?

There is an extension that does exactly what you're looking for: Relationship Permissions as ACLs The release on the extensions page only does 1 thing (setting permissioned relationships to actually ...
user avatar
  • 16.2k
5 votes

How do I set up custom permissive relationships?

Yes, that checkbox must be checked. (The one reflecting the specific "direction" you wish. I don't think you can configure this to occur automatically, however since you have custom code, it should ...
user avatar
  • 2,455
5 votes
Accepted

How can I preview the event info of a non-active event?

Currently the event needs to be active to use (preview) it. If you have an event listing page, you can uncheck Public event. That way users only see the event if you create a link to it. You should ...
user avatar
  • 2,816
5 votes

Users with Case roles cannot edit activities assigned to them: is this a bug?

I've posted a preliminary fix in JIRA. Joseph
user avatar
5 votes
Accepted

Only logged in users can change billing and recurring amount

Two bits are required for anonymous users to be able to access URLs like: /civicrm/contribute/updatebilling?reset=1&coid=4263&cs=b88004e51f6c99b0601aceab7e489315_1530392348_168 Permissions: ...
user avatar
5 votes
Accepted

View contacts but not activities

I guess Activity type ACL extension will do your job. This extension provides additional permission for each activity type. By default its set to false for all activity type. HTH Pradeep
user avatar
4 votes

How do I use the API to access protected custom data in a hook?

I followed @xavier's answer, but I'm posting what I did in case it's useful to others. See the code below. The '25' is a magic number for this Custom Field, and can be found using the CiviCRM API ...
user avatar
  • 1,007
4 votes
Accepted

How can I tell if the logged in user has a certain permission?

I believe what you're looking for is: CRM_Core_Permission::check('edit all contacts')
user avatar
4 votes
Accepted

Are there recommended directory ownership and permission settings for CiviCRM files?

What you want You want the webserver to have read-only access to all the files and dirs or the site can't function. You want the webserver to have read-write access to all the files it's expected to ...
user avatar
  • 3,688
4 votes

**Network Error - Unable to reach the server

There are a number of reasons they could be getting this error and you're not. Here are the tests to try: There could be something on your colleague's computer (e.g. a browser plugin) that's ...
user avatar
4 votes

Setting up an "ethics wall" - anonymous contributions

You could also utilize Drupal Webforms or a CiviCRM profile to let your staff (or donors) enter donations and just provide the CiviCRM or external ID (without seeing any contact information). On the ...
user avatar
  • 3,337
4 votes

How to design ACL for a multi-level organisation

IMHO it seems like you really need a consultant for this stuff. Hopefully an organization of your size (400 chapters with an unknown # of people per chatper) has budget for help. But let me offer a ...
user avatar
4 votes

Why can't anonymous users make contributions?

Do you mean an account is required to even fill in your page, or that filling in the page creates an account? If the former then it sounds like a permission issue such as Anon not having access to ...
user avatar
  • 27.2k
4 votes

How can I restrict a users ability to edit a custom field

Unfortunately I don't think this is possible through the UI. As far as I know the ACLs for custom fields only have a combined view/edit permission - it's both, or nothing. Similarly I don't think it's ...
user avatar
  • 1,960
4 votes
Accepted

ERROR: No CMS user associated with given api-key

Actual problem was that there were two CiVi contacts having the same API key set, and one of them was connected with Drupal user but another wasn't, so that was the main issue here.
user avatar
4 votes

Access Denied on one computer, but not another using same user

Are you sure the two computers access the same address? It's a common mistake to have both www.yourdomain.org and yourdomain.org (without the www) that display the same pages. Unfortunately, ...
user avatar
  • 10.1k

Only top scored, non community-wiki answers of a minimum length are eligible