CiviCRM Community Forums (archive)

*

News:

Have a question about CiviCRM?
Get it answered quickly at the new
CiviCRM Stack Exchange Q+A site
This forum was archived on 25 November 2017. Learn more.
How to get involved.
What to do if you think you've found a bug.



  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Support »
  • Using CiviCRM »
  • Using Core CiviCRM Functions (Moderator: Yashodha Chaku) »
  • What does the future hold for custom searches?
Pages: [1]

Author Topic: What does the future hold for custom searches?  (Read 768 times)

Eileen

  • Forum Godess / God
  • I’m (like) Lobo ;)
  • *****
  • Posts: 4195
  • Karma: 218
    • Fuzion
What does the future hold for custom searches?
March 14, 2010, 01:03:50 am
Hello,

I'm just wondering if the intention is that CiviReport will supercede custom searches. The permissioning on custom searches is pretty blunt instrument and I've seen a couple of cases recently where lots of users have permission to 'access civicrm' but are limited to certain contacts. However the default custom searches are all there & they can see more than the site owner realises.
Make today the day you step up to support CiviCRM and all the amazing organisations that are using it to improve our world - http://civicrm.org/contribute

joanne

  • Administrator
  • Ask me questions
  • *****
  • Posts: 852
  • Karma: 83
  • CiviCRM version: 4.4.16
  • CMS version: Drupal 7
Re: What does the future hold for custom searches?
December 18, 2010, 11:43:48 pm
I also have this same question.  We have been thinking of moving to civiCRM for a while and  have just started taking registrations for a series of seminars held throughout the country using civiEvent to see what problems may arise.

The main one so far is this very issue. The regional coordinators for each seminar need to have access to the list of registrants for their local seminar. We do not want them to have access to list of participants for the other seminars.  I have given them access through Drupal to civiCRM and civiReports. I have set up smart groups for each seminar and for each regional coordinator.  I have set up ACLs that (supposedly) restrict each coordinator to seeing details only for people registered for their local seminar.  However, the coordinators have access to all sorts of information on all participants in any seminar through custom searches. 

I have got around this problem for now by disabling all custom searches.  This probably wouldn't be practical though if our whole database were on civiCRM.

Any comments from anyone?

 
 

Donald Lobo

  • Administrator
  • I’m (like) Lobo ;)
  • *****
  • Posts: 15963
  • Karma: 470
    • CiviCRM site
  • CiviCRM version: 4.2+
  • CMS version: Drupal 7, Joomla 2.5+
  • MySQL version: 5.5.x
  • PHP version: 5.4.x
Re: What does the future hold for custom searches?
December 19, 2010, 06:20:02 am

Most custom searches now take into account contact acl's and hence limit the contacts shown to only those that the user is permissioned for.

If there is a custom search that does not do this, please investigate and file a patch against it. we can help out on IRC

lobo
A new CiviCRM Q&A resource needs YOUR help to get started. Visit our StackExchange proposed site, sign up and vote on 5 questions

joanne

  • Administrator
  • Ask me questions
  • *****
  • Posts: 852
  • Karma: 83
  • CiviCRM version: 4.4.16
  • CMS version: Drupal 7
Re: What does the future hold for custom searches?
December 20, 2010, 03:18:14 am
I suspect the phrase "please investigate and file a patch against it" means more that just "tell me the name of the problem search", but as non-programmer that is all I can do. 

Also I'm still running v3.2.5 so the problem could be fixed by 3.3.2 - but I couldn't find any reference to it in the 3.3 highlights (Just started setting up civiCRM three weeks ago and the release of 3.3 got lost in the frenzy of going live - also I'm not ready for an update yet!)

Anyway the custom search I found the problem with was CRM_Contact_Form_Search_Custom_ContributionAggregate which in 3.2.5 provides the aggregate contributions for all contacts even when run by a user who is restricted to viewing only some contacts.

JoAnne
Pages: [1]
  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Support »
  • Using CiviCRM »
  • Using Core CiviCRM Functions (Moderator: Yashodha Chaku) »
  • What does the future hold for custom searches?

This forum was archived on 2017-11-26.