9 votes
Accepted

is there any way to restrict data export?

Yes, it is now possible. I didn't hear from Kboy so I wrote an extension myself: https://github.com/progressivetech/net.ourpowerbase.exportpermission
Jamie's user avatar
  • 1,236
8 votes

Read-only access to CiviCRM

You didn't specify which CMS you're using but between your CMS permissioning and Civi ACLs, that should be possible. See here for some info: http://book.civicrm.org/user/initial-set-up/permissions-...
Lesley Carter - BackOffice's user avatar
8 votes

Access denied for specific role

We had the same issue and same resolution, but agree, it doesn't feel right. I opened an issue in the lab but couldn't find anything else: https://lab.civicrm.org/dev/drupal/issues/45 EDIT: ...
joegl's user avatar
  • 311
7 votes
Accepted

Can I set permissions to see one type of contribution, but not another?

A few years after the question was asked ... the answer is yes! Financial ACL's were added a while back but the docs have not been updated yet. Go to Administer > CiviContribute > ...
Aidan's user avatar
  • 12.9k
7 votes
Accepted

Can't save Drupal role permissions for CiviCRM

Will permissions for non-civicrm related permissions "stick"? If not I've seen this problem before when there are too many roles/permissions on the form. Drupal commons installs a lot of modules, so ...
jackrabbithanna's user avatar
7 votes
Accepted

Access Denied to CiviMail Opt-Out Form

There is a permission for it. Go to your Drupal -> People -> Permissions and give anonymous (and authenticated) permission to Unsubscribe: Access CiviMail subscribe/unsubscribe pages
KarinG - Semper IT's user avatar
6 votes
Accepted

Silent error when accessing php API has not logged in user

The recommended way to include the necessary files to run the php API is to call civicrm_initialize() before the API call.
Bryan D.'s user avatar
  • 126
6 votes

Access denied for specific role

I solved this with trial and error. I had to grant access to : CiviCRM: access CiviCRM backend and API Master control for access to the main CiviCRM backend and API. Give to trusted roles only. I'...
Kenneth Baumann's user avatar
6 votes
Accepted

Custom permission through UI

Pushed Custom permission extension, where you can create your own permission through UI by navigating to CiviCRM >> Administrator >> Customize Data and Screens >> Custom Permissions
Pradeep Nayak's user avatar
5 votes
Accepted

How can I preview the event info of a non-active event?

Currently the event needs to be active to use (preview) it. If you have an event listing page, you can uncheck Public event. That way users only see the event if you create a link to it. You should ...
Sanjay Jain's user avatar
  • 2,826
5 votes
Accepted

Are there recommended directory ownership and permission settings for CiviCRM files?

What you want You want the webserver to have read-only access to all the files and dirs or the site can't function. You want the webserver to have read-write access to all the files it's expected to ...
artfulrobot's user avatar
  • 3,910
5 votes

Users with Case roles cannot edit activities assigned to them: is this a bug?

I've posted a preliminary fix in JIRA. Joseph
Joseph Lacey's user avatar
5 votes
Accepted

Only logged in users can change billing and recurring amount

Two bits are required for anonymous users to be able to access URLs like: /civicrm/contribute/updatebilling?reset=1&coid=4263&cs=b88004e51f6c99b0601aceab7e489315_1530392348_168 Permissions: ...
KarinG - Semper IT's user avatar
5 votes
Accepted

View contacts but not activities

I guess Activity type ACL extension will do your job. This extension provides additional permission for each activity type. By default its set to false for all activity type. HTH Pradeep
Pradeep Nayak's user avatar
4 votes

Access Denied on one computer, but not another using same user

Are you sure the two computers access the same address? It's a common mistake to have both www.yourdomain.org and yourdomain.org (without the www) that display the same pages. Unfortunately, ...
Xavier's user avatar
  • 10.2k
4 votes
Accepted

Non-administrators unable to tag contacts using Tags tab redux

I can't really see the use case where "Edit All Contacts" should be required for adding a tag. I think this is something that should be changed. So the solution is to submit a patch or ask a ...
Jon G - Megaphone Tech's user avatar
4 votes

Unable to write file

Make sure that the folder /var/www/vhosts/examplesite.com/httpdocs/wp-content/plugins/files/civicrm/ is writable to the webserver user. The simplest solution is to set the permissions on that folder ...
Chris Burgess's user avatar
4 votes

How to disable "From email address" for unauthorized users?

You can try following: Go to Administer-> Customize data and Screens-> Navigation Menu and select Mailing. From mailing option, do right click and edit on 'From Email Address'. In the next window, ...
1990rk4's user avatar
  • 483
4 votes
Accepted

Allow user to manage mail templates

"edit message templates" is a separate permission in CiviCRM 4.6 (see screenshot below), so you'll get this functionality by upgrading. Upgrading is also a good idea, since version 4.5 isn't a "Long ...
Jon G - Megaphone Tech's user avatar
4 votes

Strange 'Permission Denied' message when browsing to CiviCRM home page

The errors in your log that you note are not a problem, they are CiviCRM doing a little security check for you (and succeeding). I've seen this occasionally on my servers, and especially on my ...
Alan Dixon's user avatar
  • 6,644
4 votes
Accepted

CiviCRM Entity and ACL Permissions

I wish i would have seen this question earlier, I can certainly help you out. checkout civicrm_entity.api.php in the civicrm_entity module I don't believe the controller is checking the ACL's when ...
jackrabbithanna's user avatar
4 votes
Accepted

Problems with first test site using Civicrm buildkit

Accessing URL http://localhost:7979 requires at least these things: Your client is able to resolve host localhost to the local IP address You have a server which is listening to port 7979 Your server ...
Chris Burgess's user avatar
4 votes

templates_c cache files not being deleted

Cache files are cleared by a scheduled job, which isn't enabled by default. Go to Administer menu » System Settings » Scheduled Jobs. Find the row labeled Clean-up Temporary Data and Files. On that ...
Jon G - Megaphone Tech's user avatar
4 votes

How do user permissions work for multi-level organizations?

Yes - I've done this several times. Many organizations with a chapter/branch format do this, such as IMBA, Wikimedia Foundation, the Australian Green Party, and many others. There are several ...
Jon G - Megaphone Tech's user avatar
4 votes

How to allow anonymous user to edit their contact details on CiviCRM?

The link is missing checksum parameter(cs). It should be https://example.com/civicrm/profile/edit?gid=48&id=8949&cs=11e24e6f361dceacd63ea0120b00c871&reset=1 Thanks Pradeep
Pradeep Nayak's user avatar
4 votes
Accepted

Administer CiviCRM vs. administer CiviCRM System

There are some implied permissions which you can see here: https://github.com/civicrm/civicrm-core/blob/3bb9adfc8b7b19d8ef5cb5e27b981bd9b61b8769/CRM/Core/Permission.php#L898 public static function ...
Demerit's user avatar
  • 21.7k
4 votes
Accepted

Sharing access to a search kit display table with non-admin user

Alright, in case this is useful for anyone else -- it looks like the answer was that I needed to be embedding my Search Kit search into Form Builder rather than just the using the Search Kit displays. ...
Lindsey Challis's user avatar
3 votes

Our donation pages are down

Andrew West's comment seems to be correct. There are two different things happening here - or three, depending on how you look at it. The most important is "Permission Denied". I just visited your ...
Jon G - Megaphone Tech's user avatar
3 votes
Accepted

How can a user related to an Organization login and be restricted so they only see related members of the organisation

I will try to answer though the english version of your question may mean i guess wrongly. if the goal is to have John connected to organisation First Co, and Mary connected to organisation Second Co,...
petednz - fuzion's user avatar
  • 28.1k
3 votes

Read-only access to CiviCRM

In Drupal (and I would assume the same in other cms) add a new role and give 'access civicrm' permission and also give 'view all contacts'. This is the minimum permissions setup and should allow them ...
Jamie Novick - Compucorp's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible