Admin roles and membership filters?

[P a u l]

I am new to CiviCRM and don't know the category for this. We have a requirement that our chapters have admins that are able to log in to Wordpress-CiviCRM, but only see members that belong to their chapter. I am using wordpress, and have set up separate chapter admins, and set up chapter roles (also in wordpress), but I don't see a way to restrict them with some sort of predefined member filter. Is there a way to do this? Are there any examples I can look at? Is there a way to have the predefined member filter appear in the roles editor options?

[P a u l]

I read something about groups and CiviCRM ACLs, but that you could only do this in Drupal. Do I have to switch to Drupal to have chapter specific controls like this?

[petednz]

Hi Paul

Chapter specific control can be done in several ways.

You can use ACLs - ie make an ACL admin Group for each Chapter Admin - and restrict their access to contacts in the Chapter Group

read up on ACLs in the floss manual.

There are other approaches you can take using Permissioned Relationships - and we have extended that work so that you can multi level inheritence ie so if A has permission to see B, and B to see C, and C to see D, then A can see D.

I need to write a proper blog on that, but i expect one of the two above will get you most of what you need.

As for WP v Drupal - I can't tell you what the limitations of using WP might be but with Drupal we could give eg everybody who is an A a specific Role, Bs could have another Role, etc so that not only can eg C only 'see' D's but they could for example 'not' see $$ data, while those with Role B could.

hth

[P a u l]

I set up 2 groups, chapter staff and chapter members (smart group). I created a wordpress login assigned to a wordpress role of chapter staff.

I think the Manage ACLs page is the most important.

role: chapter staff
operation: edit
type of data: group
which data: chapter members (smart group)
enabled: yes

I've been fiddling with roles, ACLs, wordpress logins for a couple of hours. I can get the chapter staff login to show all contacts or no contacts depending on how I assign ACLs, but I can't get the smart group search to work. If I allow "view all contacts" the chapter staff sees all the contacts, not the ones filtered by the smart group. If I disallow "view all contacts" they don't see anything.