CiviCase and ACL restrictions

[nickholden]

Has anyone done any work to use ACL permissions to give fine-grained perspective on cases in CiviCase?

We have a requirement to allow multiple departments to use CiviCRM and specifically the CiviCase module, but there is a view that people working in one department should not be able to view the case entries relating to cases being managed by a different department. In other words, we would like to create an ACL that can have 'view' access to all cases of a specific case type, and restrict viewing those cases to only members of that ACL.

Even better, in fact, would be to still allow the existence of a case to be viewable by other users, and maybe the start and end dates, but not the details of the case (including the case type). So that a user could see that the contact had an ongoing case but not know what the case was about. Could such a masking be possible?

[Donald Lobo]

Not heard of anyone having done this, but faintly remember that this comes up periodically

Would be good to make case acl enabled also. If we do go down that path, we should design a more scalable solution (like contacts acl). the acl solution for groups / custom data etc is not scalable (i.e. uses arrays rather than tables)

lobo

[FETmz]

Actually, Yes there is a possibility; however hard-coding from scratch; unfortunately as it is not my code; I don't have permission to show but its customised in:

drupal-dev/sites/all/modules/customfolder/case.module

it contains the case types, roles, mapping of the roles. Then after it was placed like this:

$result = array
(
                            'Housing Support' => array ('Group'),
                            'Adult Referral Day Care' => array ('Group 2'),
                            'Job Seeking' => array ('*')
);
return $result;

The part that I configured is the $result section, this is where I specify what roles can access certain case types, they are not visible to others; however I'm not sure if this helps, I'm stilling learning CiviCRM functionalities and capabilities.