9 votes
Accepted

is there any way to restrict data export?

Yes, it is now possible. I didn't hear from Kboy so I wrote an extension myself: https://github.com/progressivetech/net.ourpowerbase.exportpermission
Jamie's user avatar
  • 1,246
8 votes

Access denied for specific role

We had the same issue and same resolution, but agree, it doesn't feel right. I opened an issue in the lab but couldn't find anything else: https://lab.civicrm.org/dev/drupal/issues/45 EDIT: ...
joegl's user avatar
  • 311
7 votes
Accepted

Can I set permissions to see one type of contribution, but not another?

A few years after the question was asked ... the answer is yes! Financial ACL's were added a while back but the docs have not been updated yet. Go to Administer > CiviContribute > ...
Aidan's user avatar
  • 13.4k
7 votes
Accepted

Can't save Drupal role permissions for CiviCRM

Will permissions for non-civicrm related permissions "stick"? If not I've seen this problem before when there are too many roles/permissions on the form. Drupal commons installs a lot of modules, so ...
jackrabbithanna's user avatar
7 votes
Accepted

Access Denied to CiviMail Opt-Out Form

There is a permission for it. Go to your Drupal -> People -> Permissions and give anonymous (and authenticated) permission to Unsubscribe: Access CiviMail subscribe/unsubscribe pages
KarinG - Semper IT's user avatar
6 votes
Accepted

Silent error when accessing php API has not logged in user

The recommended way to include the necessary files to run the php API is to call civicrm_initialize() before the API call.
Bryan D.'s user avatar
  • 126
6 votes

Access denied for specific role

I solved this with trial and error. I had to grant access to : CiviCRM: access CiviCRM backend and API Master control for access to the main CiviCRM backend and API. Give to trusted roles only. I'...
Kenneth Baumann's user avatar
6 votes
Accepted

Custom permission through UI

Pushed Custom permission extension, where you can create your own permission through UI by navigating to CiviCRM >> Administrator >> Customize Data and Screens >> Custom Permissions
Pradeep Nayak's user avatar
5 votes
Accepted

Are there recommended directory ownership and permission settings for CiviCRM files?

What you want You want the webserver to have read-only access to all the files and dirs or the site can't function. You want the webserver to have read-write access to all the files it's expected to ...
artfulrobot's user avatar
  • 3,930
5 votes

Users with Case roles cannot edit activities assigned to them: is this a bug?

I've posted a preliminary fix in JIRA. Joseph
Joseph Lacey's user avatar
5 votes
Accepted

Only logged in users can change billing and recurring amount

Two bits are required for anonymous users to be able to access URLs like: /civicrm/contribute/updatebilling?reset=1&coid=4263&cs=b88004e51f6c99b0601aceab7e489315_1530392348_168 Permissions: ...
KarinG - Semper IT's user avatar
5 votes
Accepted

View contacts but not activities

I guess Activity type ACL extension will do your job. This extension provides additional permission for each activity type. By default its set to false for all activity type. HTH Pradeep
Pradeep Nayak's user avatar
4 votes

Strange 'Permission Denied' message when browsing to CiviCRM home page

The errors in your log that you note are not a problem, they are CiviCRM doing a little security check for you (and succeeding). I've seen this occasionally on my servers, and especially on my ...
Alan Dixon's user avatar
  • 6,841
4 votes
Accepted

CiviCRM Entity and ACL Permissions

I wish i would have seen this question earlier, I can certainly help you out. checkout civicrm_entity.api.php in the civicrm_entity module I don't believe the controller is checking the ACL's when ...
jackrabbithanna's user avatar
4 votes
Accepted

Problems with first test site using Civicrm buildkit

Accessing URL http://localhost:7979 requires at least these things: Your client is able to resolve host localhost to the local IP address You have a server which is listening to port 7979 Your server ...
Chris Burgess's user avatar
4 votes

templates_c cache files not being deleted

Cache files are cleared by a scheduled job, which isn't enabled by default. Go to Administer menu » System Settings » Scheduled Jobs. Find the row labeled Clean-up Temporary Data and Files. On that ...
Jon G - Megaphone Tech's user avatar
4 votes

How do user permissions work for multi-level organizations?

Yes - I've done this several times. Many organizations with a chapter/branch format do this, such as IMBA, Wikimedia Foundation, the Australian Green Party, and many others. There are several ...
Jon G - Megaphone Tech's user avatar
4 votes

How to allow anonymous user to edit their contact details on CiviCRM?

The link is missing checksum parameter(cs). It should be https://example.com/civicrm/profile/edit?gid=48&id=8949&cs=11e24e6f361dceacd63ea0120b00c871&reset=1 Thanks Pradeep
Pradeep Nayak's user avatar
4 votes
Accepted

Administer CiviCRM vs. administer CiviCRM System

There are some implied permissions which you can see here: https://github.com/civicrm/civicrm-core/blob/3bb9adfc8b7b19d8ef5cb5e27b981bd9b61b8769/CRM/Core/Permission.php#L898 public static function ...
Demerit's user avatar
  • 22.8k
4 votes
Accepted

Sharing access to a search kit display table with non-admin user

Alright, in case this is useful for anyone else -- it looks like the answer was that I needed to be embedding my Search Kit search into Form Builder rather than just the using the Search Kit displays. ...
Lindsey Challis's user avatar
3 votes
Accepted

'View in browser' link on mailing gives 'Access denied' error

You need to change the permissions to allow the public to view the mailing. This permission is called: 'CiviMail: view public CiviMail content'. This should be assigned to the anonymous role (or all ...
William Mortada's user avatar
3 votes
Accepted

How can a user related to an Organization login and be restricted so they only see related members of the organisation

I will try to answer though the english version of your question may mean i guess wrongly. if the goal is to have John connected to organisation First Co, and Mary connected to organisation Second Co,...
petednz - fuzion's user avatar
  • 28.3k
3 votes
Accepted

A question on my ability to import?

You do need permissions like import contacts to import contacts. You will need to ask for that permission to be added to your current role. The permissions for various import functionalities are ...
Chris Burgess's user avatar
3 votes
Accepted

allow anonymous users to view profiles in WordPress?

Go to CiviCRM's **Administer menu » Users and Permissions » Permissions (Access Control). Click "WordPress Access Control". In the "Anonymous User" column, check "CiviCRM: profile view". If your ...
Jon G - Megaphone Tech's user avatar
3 votes
Accepted

Dashlets not available to be added to Dashboard

If I recall correctly, this is down to some peculiarity of the dashlet permissions. If you go to the Access tab of the report in question, you'll see two ways to set the permissions (see screenshot ...
Jon G - Megaphone Tech's user avatar
3 votes

API permission check failed: CiviEvents Fails after update to 4.7.19 and 4.7.20

I ran in to this on an inherited site. It fixed itself once I removed the permission for "access CiviEvent" (which i assume had been erroneously given by previous developers) Once removed the other ...
petednz - fuzion's user avatar
  • 28.3k
3 votes

How to restrict access to CiviMail's reports, e.g. click rates

I think you can bypass using permission_check hook.
Pradeep Nayak's user avatar
3 votes

Permissions for new files under tempates_c/en_US created using 751 permission which does not allow write for group

I always # sudo -u apache drush [command] when running drush anyway. That way if drush creates new files or directories they JustWork(tm) in drupal.
Neil Davis's user avatar
3 votes

Anonymous users can't View details of a Contact in a public directory Listing

It is not possible to expose contacts to anonymous users. The only place where this is possible is with registered participants for an event because you could create a public participant listing. ...
Jaap Jansma - CiviCooP's user avatar
3 votes
Accepted

What Permission to view a user's own Profile/Dashboard

Dashboard & Permissions If you want to give the user ability to see information on themself, the permission seems to be CiviCRM: access Contact Dashboard. (I expected CiviCRM: view my contact to ...
Chris Burgess's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible