CiviCRM Community Forums (archive)

Is there a way to limit which contacts an user can see? I would like to set up some kind of a Drupal role and that role can only see contacts with a specific tag (or group). Is there a preferred way of doing this? We have some contacts that not everyone needs to see. Would also be nice to limit the fields that some users can see. One group of users only needs to see Name and email address and others may need to see addresses also. Is there a preferred way of doing this?

Thanks.

Thanks, that was a big help. I managed to create a group "US Congress", which has the contacts that I only want specific users to see. I then created a group, Development Team, that has the users that I to be able to see "US Congress". I created a role, Development, and gave that role permission to view "US Congress". I then added the Development Team to the role Development. So far, so good. But everyone is able to see any group by default (at least that is my take on it). What actually takes away all others' ability to see the group "US Congress"? If I login as a non Development Team member, I can still see "US Congress".

So am I correct in thinking that I will need to have all contacts in a group and then give the appropriate permissions via ACLs for people to view them? If I remove the 'View all contacts' permission then you will view NO contacts unless you are explicitly allowed to do so via an ACL and an ACL cannot do that if the contact is not in a group. Is this correct?

Once I remove the 'View All Contacts' permission in Drupal I will need to have every contact in a group, is that correct? Right now not all of my contacts are in a group, but since the ACLs assign an operation based on the group, every contact that I have will need to be in a group or it will not be seen. Is that correct?

Let me try to clarify (I'm not very good at this). I don't want members of the group 'Our Employees' to be able to see the 'Donor' group (unless they are also in the 'Development' group) so I cannot give the group 'Our Employees' the Drupal permission to 'View All Contacts'. That means that the contacts that they can view are dictated only by the ACLs. Since ACLs work on groups then the group 'Our Employees' can only see contacts that are in a group (and then permission has to be given via an ACL). May take on this is that all contacts must be in a group (which not all of mine are) for this to work.

Is there a way to do a search on contacts that are NOT is a group? I tried creating a custom search for this but could not figure it out.

I did notice that permission did not cascade also.

Wow, I hope that I did not ramble too much... 

Thanks for the help

I don't seem to have an 'Exclude Groups' section under Custom Searches. Any thoughts?