CiviCRM Community Forums (archive)

My use case is this: The clergy need to be able to keep private notes about people, such as someone who is struggling with depression.    

What I have working so far:
I created a custom field group called "Sensitive Information" with several fields to record notes about the individual.

I created an ACL role called "Clergy" that is allowed access to the field group "Sensitive Information". I also created an access Group called "Clergy Access Group" which is tied to the ACL role "Clergy"

This part is working correctly: A member of the "Clergy Access Group" can edit and view the "Sensitive Information".  People who are not in that group, cannot see the sensitive information.

Unfortunately, anyone who has access to the CiviCRM dashboard, can add themselves or others to the "Clergy Access Group", which renders the purpose of the group and related ACL setups useless.  

Any suggestions to get this working so that only the clergy can get to the sensitive notes?  Am I on the wrong path?


I am using CiviCRM 2.2.9 with Drupal.

Thanks,
Sarah

I removed "view/edit all contacts" permission, which works to a point. What works - Non-clergy can no longer add themselves or others to the "clergy ACL group. But they can no longer view or edit ANYONE.  How can I give them access to view and access all contacts? Is there an "everyone" group?

Thanks