CiviCRM Community Forums (archive)

Hi,
I'm having difficulty getting my permissions right for two groups.

Any ideas??

I'm using CiviCRM 3.2.3, Drupal 6.17 & PHP 5.2.13

I want a group 'editors' to be able to view & edit a group 'staff' and view but not edit other editors.
I also want the editors to be able to edit all activities related to the staff (this may be assigned to several editors, and with several staff involved).

Editors and staff are two different 'Access Control' groups that have been assigned to two different ACL roles.

I have tried 2 different ways:

1. Drupal permissions to 'view all contacts' + a CiviCRM ACL to allow editors to edit staff - this restricts the editing and allows me to view other editors but not edit them HOWEVER...an editor is not able to edit activities 'Assigned to' anyone else in the system (self, editor or staff). The assignee cannot edit the activity either!! On my Dashboard under Activity if I hit the edit button I get the attached non-recoverable error message.

2. I tried option 1 + CiviCRM ACL for editors to 'view all contacts' - this allows me to edit all activities, BUT, I can now also edit other editors (I do not have 'edit all contacts' in Drupal, or CiviCRM) - this does not seem right to me

It seems as though if I add the CiviCRM ACL 'view all contacts' I can view and edit Activities and staff which is great...but I can also view and edit other editors, which is not what I want.

Is there any possible reason that that CiviCRM ACL 'view all contacts' is adding editing privileges?
Am I missing something?

Any help or suggestions would be greatly appreciated.

Hi Lobo,
Thanks for your reply, have you come across anyone else with this issue?
I'm relatively new to CiviCRM and I will look at developing a patch however this could take some time.

In the meantime I will file an issue with notes and will attach several screenshots to explain what is happening.
By doing this will other developers also be able to work on a Patch?

Heidi