CiviCRM Community Forums (archive)

Hi,
This question has probably been asked before in many different ways, but the answer is not clear to me and it is very important that I choose the right direction for our Organization.

We have 9 regional offices. Each of those has any number of Area offices. Each Regional office has its own, separate site and each site has only one CiviCRM and Drupal database.

We are finally at the point of moving data at the Area office level into the Regional Civi database and we are struggling with ACL's and permissioning.

Using our SouthWest Region as an example, here is an example of the type of hierarchical control that we need:

PSWR is at the top of the tree. Users at this level should have full access to all the groups in the "tree"
   Los Angeles users
   Los Angeles groups

   Hawaii users
   Hawaii groups

   and so on....

We want Los Angeles/Hawaii staff to have full control over their contacts and groups but only their contacts and groups. Specifically, we want an LA/HI staff person to be able to either add or import new contacts AND to have those groups and contacts be visible/editable by LA/HI staff.

We have not been able to get this to work via ACL's: The staff person can add a new contact but then they are not able to even view that contact. Likewise with groups.

Is this possible with ACL's and are we doing something wrong?

Should we be looking into an entirely different approach to this? Multi-level org ACL permissions?

This is very important to our organization and, if need be, we would consider funding the code for this, especially if others would join in the effort.

Thanks,
Cynthia
   

Hi lobo,
Thanks for replying. I will make sure to follow the project and help if I can.

Thanks again and I hope you are doing well,
Cynthia

Nb Cynthia, Happy to talk with you about on Skype or something else if you want to