CiviCRM Community Forums (archive)

*

News:

Have a question about CiviCRM?
Get it answered quickly at the new
CiviCRM Stack Exchange Q+A site
This forum was archived on 25 November 2017. Learn more.
How to get involved.
What to do if you think you've found a bug.



  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Support »
  • Using CiviCRM »
  • Post-installation Setup and Configuration (Moderator: Dave Greenberg) »
  • Visibility of profile fields
Pages: [1]

Author Topic: Visibility of profile fields  (Read 2376 times)

gmasky

  • Guest
Visibility of profile fields
October 25, 2007, 10:06:13 am
In our Personal profile I have profiles fields like Date of birth, Residential address and Telephone number set as "Visibility = User and User Admin only" Others like Name etc I have "Visibility =Public user pages & Listings"

The expected behavior I am looking for is for an authenticated user not to see the DOB, Residential address and Telephone number while seeing the other fields. However an authenticated user can see all fields be it in the Drupal user account where Civicrm profiles can be seen as well as while searching.

How do I solve this issue.

Civicrm 1.7, Drupal 4.7

Gerry

Donald Lobo

  • Administrator
  • I’m (like) Lobo ;)
  • *****
  • Posts: 15963
  • Karma: 470
    • CiviCRM site
  • CiviCRM version: 4.2+
  • CMS version: Drupal 7, Joomla 2.5+
  • MySQL version: 5.5.x
  • PHP version: 5.4.x
Re: Visibility of profile fields
October 25, 2007, 10:53:49 am

An auth user should be able to see all the profile fields since user and user admin enables the user to see it. However it should not appear in profile listings and search

can you reproduce this on demo and if so let us know how to check it etc

thanx

lobo
A new CiviCRM Q&A resource needs YOUR help to get started. Visit our StackExchange proposed site, sign up and vote on 5 questions

gmasky

  • Guest
Re: Visibility of profile fields
October 26, 2007, 10:13:52 am
On Demo when I login as username:demo and password:demo

The name and Address Profile has a field Street Address(Home) (Individual) which has visibility:Visibility User and User Admin Only.

Assuming demo has admin rights, I can see Address Profile. Not sure how to see this as just an authenticated user and check if this field is viewable in search and listing?

Dave Greenberg

  • Administrator
  • I’m (like) Lobo ;)
  • *****
  • Posts: 5760
  • Karma: 226
    • My CiviCRM Blog
Re: Visibility of profile fields
October 26, 2007, 03:26:01 pm
"User and User Admin" visibility for a profile field means that the person whose contact record it is - OR  someone with "administer users" permission in Drupal OR a backend admin in Joomla - can see that field.

Using your example on our demo site, if I'm logged in as demo demo - and go to the Name and Address "view" page for my own record - I see the Street Address:
http://demo.civicrm.org/drupal/civicrm/profile/view?reset=1&id=102&gid=1

.. but if I look at the same screen for any other contact record, that field does NOT appear:
http://demo.civicrm.org/drupal/civicrm/profile/view?reset=1&id=34&gid=1

... that's because demo/demo does NOT have "administer users" permission.
Protect your investment in CiviCRM by  becoming a Member!

gmasky

  • Guest
Re: Visibility of profile fields
October 27, 2007, 11:56:46 pm
I log in as demo:

I do a contact search with the search box blank. I click on Adams,Alice (Mrs Alice D Adams Sr)->Summary Tab
http://demo.civicrm.org/drupal/civicrm/contact/view?reset=1&cid=34

I can see her profile that lists her Home address and date of birth. Both these fields have visibility marked as "User and User Admin"

Am I missing something?

Donald Lobo

  • Administrator
  • I’m (like) Lobo ;)
  • *****
  • Posts: 15963
  • Karma: 470
    • CiviCRM site
  • CiviCRM version: 4.2+
  • CMS version: Drupal 7, Joomla 2.5+
  • MySQL version: 5.5.x
  • PHP version: 5.4.x
Re: Visibility of profile fields
October 28, 2007, 12:02:43 am

The above url (civicrm/contact/view) is not a profile view (it is a complete contact view), hence profile rules do not apply. all profile urls are of the form: civicrm/profile/*

please re-read dave's message to get a better understanding of what is happening and why

lobo
A new CiviCRM Q&A resource needs YOUR help to get started. Visit our StackExchange proposed site, sign up and vote on 5 questions

gmasky

  • Guest
Re: Visibility of profile fields
October 29, 2007, 01:16:49 am
The contact view has profiles and profile fields within them. My problem is that (say) a user does not want other authenticated users to view his telephone numbers, home address and date of birth.

Since an authenticated user can search and view contact records he can see profiles of users and even the profile fields marked "user and user admin" within the contact record. I need to hide these  profile fields from authenticated users. I want these profile fields viewable by just the user himself and admin.

How can I achieve this.

Dave Greenberg

  • Administrator
  • I’m (like) Lobo ;)
  • *****
  • Posts: 5760
  • Karma: 226
    • My CiviCRM Blog
Re: Visibility of profile fields
October 29, 2007, 07:08:50 am
Gerry - You need to remove the "access CiviCRM" and "view all contacts" permissions for roles for whom you want to limit data access as you've described - and then direct them to use the Profile-based search and view screens. Please read this entire section of the documentation for a better understanding of the difference between the "backend" CiviCRM screens you are referencing and the Profile screens:

http://wiki.civicrm.org/confluence/display/CRMDOC/Profiles+Admin
Protect your investment in CiviCRM by  becoming a Member!
Pages: [1]
  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Support »
  • Using CiviCRM »
  • Post-installation Setup and Configuration (Moderator: Dave Greenberg) »
  • Visibility of profile fields

This forum was archived on 2017-11-26.